🇺🇸
TPI-Abuse
2026-06-02 20:36:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 16:36:26.983125 2026] [security2:error] [pid 521:tid 521] [client 2a0b:8bc0:1:15:::44758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adoniahenterprises.com"] [uri "/goober_.htaccess"] [unique_id "ah8-ym8WmxeVno0PxHv9SgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 22:01:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 18:01:09.381703 2026] [security2:error] [pid 5129:tid 5129] [client 2a0b:8bc0:1:15:::41954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ad1soundstudio.darkalleyproductions.com"] [uri "/.env.production"] [unique_id "ah4BJZNwRCAXXcb7UVlaWAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-06-01 17:12:47
(3 months ago)
GET /.git/HEAD (Tarpitted for 16m36s, wasted 58.48kB)
Web App Attack
🇩🇪
SCHAPPY
2026-06-01 16:55:33
(3 months ago)
Bad bot identified by user agent
Bad Web Bot
🇩🇪
maxpower
2026-06-01 10:20:50
(3 months ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 2a0b:8bc0:1:15:: (ES/Spain/-): 1 in the last 3600 secs; Ports: ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 2a0b:8bc0:1:15:: (ES/Spain/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2a0b:8bc0:1:15:: - - [01/Jun/2026:12:20:38 +0200] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1" 200 4692 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" host=accademiam.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-31 22:43:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 18:43:56.393475 2026] [security2:error] [pid 4989:tid 5005] [client 2a0b:8bc0:1:15:::36872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "8mm-stockfootage.com.credit-card-cap.com"] [uri "/.env.local"] [unique_id "ahy5rGm8b69fXfYSUyR9twAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 03:35:02
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 23:34:52.319703 2026] [security2:error] [pid 18613:tid 18613] [client 2a0b:8bc0:1:15:::17470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "40svocaltrio.com.flashbackmusicmemories.com"] [uri "/.env"] [unique_id "ahusXBtsUtov2kG5kiJw3wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 02:18:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 22:18:31.215439 2026] [security2:error] [pid 12378:tid 12378] [client 2a0b:8bc0:1:15:::31918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dstores.com"] [uri "/.env"] [unique_id "ahuad9nHKAC3Fr766odawgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 01:07:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 21:07:45.819001 2026] [security2:error] [pid 10689:tid 10689] [client 2a0b:8bc0:1:15:::40866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "38floorsupply.com"] [uri "/.env.local"] [unique_id "ahuJ4efSY4b2R8w6JfQ0SgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 23:42:06
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 19:42:03.590263 2026] [security2:error] [pid 5728:tid 5728] [client 2a0b:8bc0:1:15:::29238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "34.gisur.com"] [uri "/.env.local"] [unique_id "aht1y-Mfqiiz1XBT6TbKJQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 21:38:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 17:38:36.303421 2026] [security2:error] [pid 32265:tid 32265] [client 2a0b:8bc0:1:15:::31262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2mpr.com"] [uri "/.env.local"] [unique_id "ahtY3PJQbIq0TtAeqy29KgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 05:26:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 s ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:1:15:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 01:26:02.211159 2026] [security2:error] [pid 19782:tid 19782] [client 2a0b:8bc0:1:15:::59784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestattorneys.com"] [uri "/.env"] [unique_id "ahp06kE7c-ICQmcYlYwSsQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-03-12 09:01:27
(6 months ago)
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Proto ...
show more
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-03-12T05:11:48Z
User-Agent: Mozilla/5.0
show less
Bad Web Bot
🇭🇺
kranem
2026-03-11 18:00:23
(6 months ago)
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Proto ...
show more
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-03-11T16:48:45Z
User-Agent: Mozilla/5.0
show less
Bad Web Bot
🇩🇪
kranem
2026-02-09 03:01:03
(7 months ago)
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Proto ...
show more
Triggered Cloudflare WAF from NL.
Action taken: LINK_MAZE_INJECTED
ASN: 41608 (NEXTGENWEBS-NL)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-02-09T00:23:41Z
User-Agent: Mozilla/5.0
show less
Bad Web Bot
