🇳🇱
Site.eu
2026-06-22 03:52:14
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-22 03:11:16
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 23:11:09.207127 2026] [security2:error] [pid 16332:tid 16332] [client 2a04:c300:400::1a7:61154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.apfarrell.com"] [uri "/.env.old"] [unique_id "ajinzU9itek0uQaVRtGaigAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 02:18:12
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 22:18:06.780845 2026] [security2:error] [pid 15237:tid 15237] [client 2a04:c300:400::1a7:59598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.hodgalil.org"] [uri "/app/.env"] [unique_id "ajibXvnwGS1hp8shIOY35wAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Kreapptivo
2026-06-22 01:05:10
(3 hours ago)
[22/Jun/2026:03:05:07 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; I ...
show more
[22/Jun/2026:03:05:07 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0"
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-06-22 00:48:38
(4 hours ago)
(mod_security) mod_security (id:949110) triggered by 2a04:c300:400::1a7 (Unknown): N in the last X s ...
show more
(mod_security) mod_security (id:949110) triggered by 2a04:c300:400::1a7 (Unknown): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 23:38:24
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 19:38:20.369145 2026] [security2:error] [pid 12386:tid 12386] [client 2a04:c300:400::1a7:51862] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mycouchwriting.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mycouchwriting.com"] [uri "/wp-content/debug.log"] [unique_id "ajh17IKokwSLTpGkKoAuSAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 23:08:14
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 19:08:08.229167 2026] [security2:error] [pid 7125:tid 7125] [client 2a04:c300:400::1a7:56914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.twincitytn.com"] [uri "/.env"] [unique_id "ajhu2NCKg02vt2YT9uFMrQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-21 22:34:34
(6 hours ago)
{"level":"info","ts":1782079714.9791539,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1782079714.9791539,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"2a04:c300:400::1a7","remote_port":"18992","client_ip":"2a04:c300:400::1a7","proto":"HTTP/1.1","method":"GET","host":"status.distill.pub","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1"],"Accept":["*/*"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000088288,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.distill.pub/"],"Content-Type":[]}}
{"level":"info","ts":1782079720.1446338,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"2a04:c300:400::1a7","remote_port":"26614","client_ip":"2a04:c300:400::1a7","proto":"HTTP/1.1","method":"GET","host":"status.distill.pub","uri":"/serviceAccountKey.json","headers":{"Accept-Encoding":["gzip"],"U
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 22:32:27
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:32:20.500574 2026] [security2:error] [pid 566:tid 566] [client 2a04:c300:400::1a7:46782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.marinestorage.com"] [uri "/.env.staging"] [unique_id "ajhmdL3bhTSaNVImKbGvagAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 22:14:25
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:14:18.438581 2026] [security2:error] [pid 6628:tid 6704] [client 2a04:c300:400::1a7:35540] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||crosstheater.pwrcoupling.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crosstheater.pwrcoupling.com"] [uri "/wp-content/debug.log"] [unique_id "ajhiOhPbwa7LhwX6dcvEWAAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cybersteve99
2026-06-21 21:44:29
(7 hours ago)
Too many 4xx Requests -
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 21:42:28
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 17:42:22.812369 2026] [security2:error] [pid 16928:tid 16928] [client 2a04:c300:400::1a7:5526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.justicehoward.com"] [uri "/.env"] [unique_id "ajhavoR9pM9m5QLL-xWGFgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 20:37:38
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 16:37:35.432140 2026] [security2:error] [pid 15778:tid 15791] [client 2a04:c300:400::1a7:28860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.honeyled.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.honeyled.com"] [uri "/wp-content/debug.log"] [unique_id "ajhLj9i8v8k40fp7gFRN3QAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-06-21 20:30:04
(8 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 20:17:35
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a04:c300:400::1a7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 16:17:28.608857 2026] [security2:error] [pid 24526:tid 24526] [client 2a04:c300:400::1a7:32282] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||eovdcconsulting.eu|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eovdcconsulting.eu"] [uri "/wp-content/debug.log"] [unique_id "ajhG2EivLysUZP3fQdwp1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack