🇺🇸
TPI-Abuse
2026-08-01 08:48:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 04:47:59.181060 2026] [security2:error] [pid 1904978:tid 1904978] [client 2a09:bac1:7680:460::5e:59:45088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.stellwagenmusic.com"] [uri "/.env"] [unique_id "am2yv4c0_H_eUuSbbG18WgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 00:55:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 20:55:35.542531 2026] [security2:error] [pid 2544158:tid 2544158] [client 2a09:bac1:7680:460::5e:59:41868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.celebrationofmike.com"] [uri "/.env"] [unique_id "amVbB5MYuz1DmrzUuvS80AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 17:38:19
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:38:15.843182 2026] [security2:error] [pid 2541159:tid 2541159] [client 2a09:bac1:7680:460::5e:59:51918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.chatsupply.us"] [uri "/.env"] [unique_id "amT0h24VufULTRqRjwCoOAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 17:15:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:15:23.604544 2026] [security2:error] [pid 277332:tid 277332] [client 2a09:bac1:7680:460::5e:59:53534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.labcomputers.com"] [uri "/.env"] [unique_id "amTvK_B97Brlei1P0l977AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-07-25 14:50:08
(1 month ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 14:12:38
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 10:12:33.791634 2026] [security2:error] [pid 2319011:tid 2319011] [client 2a09:bac1:7680:460::5e:59:33470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thestardance.com"] [uri "/.env"] [unique_id "amIhUSjxihT9lBIVWwgQ7QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-07-23 06:47:13
(1 month ago)
[redacted] 2a09:bac1:7680:460::5e:59 - - [23/Jul/2026:07:47:10 +0100] "GET /.git-credentials HTTP/1. ...
show more
[redacted] 2a09:bac1:7680:460::5e:59 - - [23/Jul/2026:07:47:10 +0100] "GET /.git-credentials HTTP/1.1" 200 202 0/21924 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://[redacted]/support/amazonbot)" [redacted] 2a09:bac1:7680:460::5e:59 - - [23/Jul/2026:07:47:10 +0100] "GET /.aws/config HTTP/1.1" 200 203 0/17191 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://[redacted]/support/amazonbot)"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 00:39:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 20:39:48.301025 2026] [security2:error] [pid 2234616:tid 2234616] [client 2a09:bac1:7680:460::5e:59:40356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.naomipyle.com"] [uri "/.env"] [unique_id "al6_1E3Hsdx3T2X-TKcu-AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 23:58:52
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:58:44.057747 2026] [security2:error] [pid 3431843:tid 3431843] [client 2a09:bac1:7680:460::5e:59:29176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.susanoneill.us"] [uri "/.env"] [unique_id "al62NBlnM9JxKhikeOZZXAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 23:34:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:34:01.339473 2026] [security2:error] [pid 20010:tid 20010] [client 2a09:bac1:7680:460::5e:59:41432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.paragonprintingcenter.com"] [uri "/.env"] [unique_id "al6wabM42XuJ8UDdXWegDgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 22:29:08
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:29:01.656047 2026] [security2:error] [pid 19571:tid 19571] [client 2a09:bac1:7680:460::5e:59:22102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mywhisperkids.com"] [uri "/.env"] [unique_id "al6hLe8Nqe2AviiSCiQ0BQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 21:47:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 17:47:24.139205 2026] [security2:error] [pid 5108:tid 5231] [client 2a09:bac1:7680:460::5e:59:56450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.104ventures.com"] [uri "/.env"] [unique_id "al6XbOpB8pEODLpDLbepjAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 21:13:51
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 17:13:47.085574 2026] [security2:error] [pid 22573:tid 22573] [client 2a09:bac1:7680:460::5e:59:49590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.statistician.cmabiblequizzing.org"] [uri "/.env"] [unique_id "al6Pi26-xvAYnSjNqQxA4gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 08:01:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 04:01:40.754167 2026] [security2:error] [pid 8598:tid 8598] [client 2a09:bac1:7680:460::5e:59:20926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurikka.eu"] [uri "/.env.example"] [unique_id "alyEZMU4FFhhswj2af02GgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 07:34:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:7680:460::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 03:34:06.463976 2026] [security2:error] [pid 28144:tid 28144] [client 2a09:bac1:7680:460::5e:59:17524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chatari.ai"] [uri "/.env.test"] [unique_id "alx97qAqKl4XP47c_NbrZgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
