🇺🇸
apislytics
2026-08-01 08:53:34
(1 month ago)
Automatic hard ban after repeated rate-limit abuse
Brute-Force
🇺🇸
TPI-Abuse
2026-07-26 22:23:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 18:23:21.248816 2026] [security2:error] [pid 3534754:tid 3534754] [client 2a09:bac5:9447:3af::5e:59:36164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.drgtek.com"] [uri "/.env.local"] [unique_id "amaI2U7DPjNlZJey_c2rxAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-07-21 19:22:00
(1 month ago)
IPBlock protected site ID [4055-d][s=01].
Bad agent, site scraper bot.
Bad Web Bot
🇩🇪
Hazzard
2026-07-21 08:29:42
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
🇳🇱
Mangelot Hosting
2026-07-20 04:09:39
(1 month ago)
(modsecurity) srv101 ModSecurity 2a09:bac5:9447:3af::5e:59 (US/United States/-): 10 in the last 3600 ...
show more
(modsecurity) srv101 ModSecurity 2a09:bac5:9447:3af::5e:59 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 03:46:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 23:45:56.889606 2026] [security2:error] [pid 21333:tid 21333] [client 2a09:bac5:9447:3af::5e:59:44438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.edgecomix.com"] [uri "/.env"] [unique_id "al2Z9KA-dAp60f_MWAluJwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 03:13:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 23:13:43.903091 2026] [security2:error] [pid 217578:tid 217578] [client 2a09:bac5:9447:3af::5e:59:46278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.jonvaltmusic.com"] [uri "/.env"] [unique_id "al2SZ4qhvm0S-ESQ3Il8-QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 18:39:49
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 14:39:41.874339 2026] [security2:error] [pid 1266743:tid 1266743] [client 2a09:bac5:9447:3af::5e:59:25306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariaentertainment.com"] [uri "/.git/config"] [unique_id "alp27aAVAS-TcFXhWD6Q4QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-16 21:59:30
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-15.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-15 11:51:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 07:51:38.895284 2026] [security2:error] [pid 9685:tid 9685] [client 2a09:bac5:9447:3af::5e:59:50728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jerusalem-temple-today.com"] [uri "/.env.local"] [unique_id "ald0SnmsWs9omqqxBOnBuAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 07:59:23
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 03:59:17.915857 2026] [security2:error] [pid 6721:tid 6721] [client 2a09:bac5:9447:3af::5e:59:15788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.orborienting.com"] [uri "/.env"] [unique_id "alc91QzZvLBqUYLV6VPYdAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 07:33:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 03:33:48.577808 2026] [security2:error] [pid 6730:tid 6730] [client 2a09:bac5:9447:3af::5e:59:30876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ssl-grp.com"] [uri "/.env"] [unique_id "alc33EFM2hKwYxkcJQgMKAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 06:32:12
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:32:08.297195 2026] [security2:error] [pid 25994:tid 25994] [client 2a09:bac5:9447:3af::5e:59:14056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radtraininginc.radtraininginc.net"] [uri "/.env"] [unique_id "alcpaGs8-JXD2rsiTqPtyAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 06:09:50
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:09:47.596136 2026] [security2:error] [pid 11877:tid 11877] [client 2a09:bac5:9447:3af::5e:59:29616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.amazingwelding.com"] [uri "/.env"] [unique_id "alckK3zYUCsW_EfKn2e2GQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 05:50:56
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac5:9447:3af::5e:59 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 01:50:49.881708 2026] [security2:error] [pid 31946:tid 31946] [client 2a09:bac5:9447:3af::5e:59:28346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rhysryan.com"] [uri "/.env"] [unique_id "alcfuZjfBdb2cfTbN4b-MgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack