🇺🇸
TPI-Abuse
2026-07-21 07:16:40
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:16:36.808246 2026] [security2:error] [pid 3980:tid 3980] [client 2a09:b ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 03:16:36.808246 2026] [security2:error] [pid 3980:tid 3980] [client 2a09:bac1:1160:1e8::c4:51:10294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ankitoner.com"] [uri "/.env"] [unique_id "al8c1EXTFYpcP_yn3WrNgQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 23:46:33
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:46:26.297100 2026] [security2:error] [pid 24261:tid 24261] [client 2a09 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:46:26.297100 2026] [security2:error] [pid 24261:tid 24261] [client 2a09:bac1:1160:1e8::c4:51:20668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angelachawkins.com"] [uri "/.env"] [unique_id "al6zUsXIIHbjH7YOCrxwqgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 19:55:14
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 15:55:09.546841 2026] [security2:error] [pid 2205379:tid 2205379] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 15:55:09.546841 2026] [security2:error] [pid 2205379:tid 2205379] [client 2a09:bac1:1160:1e8::c4:51:64604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "altered-egos.com"] [uri "/.env"] [unique_id "al0rnYc0l-PGbmyf-Dj-mQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 15:11:07
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:11:03.458654 2026] [security2:error] [pid 2724:tid 2724] [client 2a09:b ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 11:11:03.458654 2026] [security2:error] [pid 2724:tid 2724] [client 2a09:bac1:1160:1e8::c4:51:11712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andrejblatnik.com"] [uri "/.env"] [unique_id "alzpB5jyRv6M1OfS1pfZoAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 12:35:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:35:48.891421 2026] [security2:error] [pid 2934809:tid 2934809] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:35:48.891421 2026] [security2:error] [pid 2934809:tid 2934809] [client 2a09:bac1:1160:1e8::c4:51:20390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andiamocomputers.com"] [uri "/.env"] [unique_id "alzEpMVxnvQ3QgFOIPk2FAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 22:06:05
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 18:05:57.986721 2026] [security2:error] [pid 22363:tid 22435] [client 2a09 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 18:05:57.986721 2026] [security2:error] [pid 22363:tid 22435] [client 2a09:bac1:1160:1e8::c4:51:32424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ajbruner.com"] [uri "/.env"] [unique_id "alVhRS18A-0F4JBddyxVkwAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 21:20:44
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 17:20:37.165270 2026] [security2:error] [pid 21741:tid 21741] [client 2a09 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:1160:1e8::c4:51 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 17:20:37.165270 2026] [security2:error] [pid 21741:tid 21741] [client 2a09:bac1:1160:1e8::c4:51:23020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aam-artists.com"] [uri "/.env"] [unique_id "alVWpSFHD3vg7qlnL_aVowAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-06-23 09:56:08
UTC ·
(4 months ago)
L0ss Honeypot: Environment file access attempt. Path: /.env
Web App Attack
🇩🇪
big-cloud.nl
2026-06-22 23:51:50
UTC ·
(4 months ago)
Try to access /.env
Web App Attack
🇫🇷
applemooz
2026-05-27 20:39:04
UTC ·
(5 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack