🇺🇸
TPI-Abuse
2026-07-30 20:58:36
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:58:31.576919 2026] [security2:error] [pid 1450471:tid 1450471] [client 2a09:bac5:9445:3af::5e:87:11220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cacs.me"] [uri "/.env.production"] [unique_id "amu69yYVfFZf1yIjvw_wYAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 20:41:37
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:41:29.661720 2026] [security2:error] [pid 1698725:tid 1698725] [client 2a09:bac5:9445:3af::5e:87:61162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kelleysbridge.com"] [uri "/.env"] [unique_id "amu2-ckKM4A-GQNKGEERsQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-07-30 20:34:19
(18 hours ago)
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show more
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-07-28 12:25:04
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-07-28 01:43:05
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-07-26 06:07:23
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 02:07:16.896857 2026] [security2:error] [pid 155878:tid 156014] [client 2a09:bac5:9445:3af::5e:87:29940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southerncalifornia.aafm.us"] [uri "/.env"] [unique_id "amWkFP-49YEpAezksuljqQAAAlI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-17 21:59:13
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-16.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-16 01:41:58
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:41:54.129546 2026] [security2:error] [pid 7161:tid 7161] [client 2a09:bac5:9445:3af::5e:87:42496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.beach98.com"] [uri "/.env"] [unique_id "alg24pyzcyst9InrgmH97AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 01:19:37
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:19:29.939061 2026] [security2:error] [pid 32147:tid 32147] [client 2a09:bac5:9445:3af::5e:87:57988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.agingworkforcenews.com"] [uri "/.env"] [unique_id "algxoYK2d4OxEtjY8Ta6IAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 01:02:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9445:3af::5e:87 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 21:02:32.469238 2026] [security2:error] [pid 23813:tid 23813] [client 2a09:bac5:9445:3af::5e:87:39892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.allisonbtaylor.com"] [uri "/.env"] [unique_id "algtqNqL4DRBGX9wJHLS5gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack