🇺🇸
TPI-Abuse
2026-06-23 09:33:29
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 05:33:21.288531 2026] [security2:error] [pid 27250:tid 27250] [client 2a02:6ea0:5501::24:59563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web233.dnchosting.com"] [uri "/.env"] [unique_id "ajpS4afNgYr_ZKuwi9ku8QAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 04:30:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 00:30:41.553842 2026] [security2:error] [pid 26893:tid 26893] [client 2a02:6ea0:5501::24:63127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curtsnet.com"] [uri "/.env"] [unique_id "ajoL8RQztkzfa1S3qhhApAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-23 04:07:45
(2 months ago)
[TueJun2306:07:41.6564522026][security2:error][pid562757:tid562768][client2a02:6ea0:5501::24:0]ModSe ...
show more
[TueJun2306:07:41.6564522026][security2:error][pid562757:tid562768][client2a02:6ea0:5501::24:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"shadowdrummer.com\"][uri\"/.env\"][unique_id\"ajoGjWC_7VKoFk9V-XhK3QAAAAk\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 01:11:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 21:11:50.879850 2026] [security2:error] [pid 5798:tid 5861] [client 2a02:6ea0:5501::24:52247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.e819.kylight.com"] [uri "/.env"] [unique_id "ajndVsKvrVdrqpYPPJvb8QAAAZg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-22 23:19:59
(2 months ago)
(modsecurity) srv104 ModSecurity 2a02:6ea0:5501::24 (PE/Peru/-): 10 in the last 3600 secs; Ports: *; ...
show more
(modsecurity) srv104 ModSecurity 2a02:6ea0:5501::24 (PE/Peru/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 19:01:15
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 15:01:07.734013 2026] [security2:error] [pid 18999:tid 18999] [client 2a02:6ea0:5501::24:61008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fxztrader.com"] [uri "/backend/.env"] [unique_id "ajmGc_hFRZb8bXS5G27aPwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-06-22 01:52:49
(2 months ago)
[Mon Jun 22 03:52:46.984229 2026] [security2:error] [pid 290789:tid 290808] [client 2a02:6ea0:5501:: ...
show more
[Mon Jun 22 03:52:46.984229 2026] [security2:error] [pid 290789:tid 290808] [client 2a02:6ea0:5501::24:58050] [client 2a02:6ea0:5501::24] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nei.lol"] [uri "/.env"] [unique_id "ajiVbp4nO5UVFUifmhZl-gAAAE0"]
[Mon Jun 22 03:52:48.989475 2026] [security2:error] [pid 290789:tid 290802] [client 2a02:6ea0:5501::24:58050] [client 2a02:6ea0:5501::24] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-de
...
show less
Web App Attack
Bad Web Bot
🇳🇱
e.fierstra
2026-06-21 23:53:05
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 21:16:22
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 17:16:11.046782 2026] [security2:error] [pid 10504:tid 10504] [client 2a02:6ea0:5501::24:58498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barryschiller.com"] [uri "/.env"] [unique_id "ajcDG1wZ0JKuETEdjLFmnQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
MrBister
2026-06-20 03:49:00
(2 months ago)
2a02:6ea0:5501::24 - - [20/Jun/2026:05:49:44 +0200] "GET / HTTP/1.1"
2a02:6ea0:5501::24 - - [20/Ju ...
show more
2a02:6ea0:5501::24 - - [20/Jun/2026:05:49:44 +0200] "GET / HTTP/1.1"
2a02:6ea0:5501::24 - - [20/Jun/2026:05:49:47 +0200] "GET /.env.production HTTP/1.1"
2a02:6ea0:5501::24 - - [20/Jun/2026:05:49:49 +0200] "GET /.env HTTP/1.1"
show less
Port Scan
Brute-Force
Exploited Host
Hacking
🇺🇸
TPI-Abuse
2026-06-20 03:10:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 23:10:05.461751 2026] [security2:error] [pid 27245:tid 27245] [client 2a02:6ea0:5501::24:55658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infodrop.info"] [uri "/.env"] [unique_id "ajYEjTvxx6pU0MQUsaXHAgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 18:36:06
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 14:36:00.671414 2026] [security2:error] [pid 21223:tid 21223] [client 2a02:6ea0:5501::24:50353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcedinc.com"] [uri "/.env"] [unique_id "ajWMEKMH_BChEYTh0nwVRgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 12:14:47
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:14:43.583704 2026] [security2:error] [pid 26274:tid 26274] [client 2a02:6ea0:5501::24:57812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vidacellenlaweb.com"] [uri "/.env"] [unique_id "ajUys_bdAGTDQNuTs2c13QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 23:28:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 19:28:25.073290 2026] [security2:error] [pid 14956:tid 14956] [client 2a02:6ea0:5501::24:56227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "viewtronics.eu"] [uri "/.git/config"] [unique_id "ajR_GXov7q3cfTuh6B_HLwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 08:15:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:6ea0:5501::24 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:15:23.414386 2026] [security2:error] [pid 8046:tid 8133] [client 2a02:6ea0:5501::24:61277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-paullederer.com"] [uri "/.env"] [unique_id "ajOpG3jJpJwT_QOTztS5-gAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
