🇺🇸
TPI-Abuse
2026-06-23 18:06:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 14:06:09.876197 2026] [security2:error] [pid 19132:tid 19132] [client 2a09:bac5:2a95:1282::1d8:22f:62192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modistat.com"] [uri "/wp-config.php"] [unique_id "ajrLEdh03XotSRPA9EGdcQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 15:27:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 11:27:38.446412 2026] [security2:error] [pid 26383:tid 26383] [client 2a09:bac5:2a95:1282::1d8:22f:27258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.exoticcarwrap.com"] [uri "/.env.production.local"] [unique_id "ajql6vuW86z6YsxWY3h25gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 13:39:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 09:39:05.290328 2026] [security2:error] [pid 31825:tid 31825] [client 2a09:bac5:2a95:1282::1d8:22f:37982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "norinpaco.com"] [uri "/.env.sample"] [unique_id "ajqMedKsw3On52rT9a6kqgAAAAQ"], referer: https://www.google.com/search?q=norinpaco.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-22 09:57:57
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 06:40:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 02:40:13.772426 2026] [security2:error] [pid 16942:tid 16942] [client 2a09:bac5:2a95:1282::1d8:22f:20966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microscope.modelengines.info"] [uri "/.env.bak"] [unique_id "ajjYzcHCChbDSF6ViIuK9wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 22:02:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 18:02:32.778312 2026] [security2:error] [pid 17690:tid 17690] [client 2a09:bac5:2a95:1282::1d8:22f:55556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "testsite.kathrynmcbride.com"] [uri "/wp-config.php"] [unique_id "ajhfeKJMw35tEsDXPvn0EwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-21 20:40:03
(4 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 18:29:41
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:2a95:1282::1d8:22f (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 14:29:38.387620 2026] [security2:error] [pid 26116:tid 26131] [client 2a09:bac5:2a95:1282::1d8:22f:58568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quantumgaze.iancaird.com"] [uri "/.env.production"] [unique_id "ajgtkpXSqvHZMR0ox_FYegAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack