🇺🇸
TPI-Abuse
2026-04-14 01:26:00
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 21:25:55.113244 2026] [security2:error] [pid 408854:tid 408854] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 21:25:55.113244 2026] [security2:error] [pid 408854:tid 408854] [client 2a0b:8bc0:2:2b38::1:26622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frontlinefirestop.com"] [uri "/server/.env"] [unique_id "ad2XoxzMkBVhixiDUZuM0AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 00:56:41
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 20:56:36.904190 2026] [security2:error] [pid 590242:tid 590242] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 20:56:36.904190 2026] [security2:error] [pid 590242:tid 590242] [client 2a0b:8bc0:2:2b38::1:22612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fritsknuf.com"] [uri "/.env.staging"] [unique_id "ad2QxGVqIlyZ0T2VtgM1XwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 00:19:55
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 20:19:50.975453 2026] [security2:error] [pid 1210824:tid 1210824] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 20:19:50.975453 2026] [security2:error] [pid 1210824:tid 1210824] [client 2a0b:8bc0:2:2b38::1:61552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "friedeprod.com"] [uri "/.env.staging"] [unique_id "ad2IJll0Q6z_DXx6W31NsAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
natdem.org
2026-04-14 00:04:20
UTC ·
(6 months ago)
Web: .env file probe, Config file probe, Git repository probe
Web App Attack
Hacking
🇩🇪
crypto i trust, hold i must
2026-04-13 23:16:28
UTC ·
(6 months ago)
Web scanner path: /.aws/credentials
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 21:55:02
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 17:54:55.230082 2026] [security2:error] [pid 208995:tid 209004] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 17:54:55.230082 2026] [security2:error] [pid 208995:tid 209004] [client 2a0b:8bc0:2:2b38::1:8578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freelipink.com"] [uri "/laravel/.env"] [unique_id "ad1mL5QXc8XxzMRAQadGVwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 20:28:14
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:28:08.938735 2026] [security2:error] [pid 711679:tid 711679] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:28:08.938735 2026] [security2:error] [pid 711679:tid 711679] [client 2a0b:8bc0:2:2b38::1:21528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franklycommerce.com"] [uri "/.env.local"] [unique_id "ad1R2M9lQ6LMoyv_858JZAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-04-13 20:12:16
UTC ·
(6 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 20:04:26
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:04:20.576063 2026] [security2:error] [pid 4026248:tid 4026248] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:04:20.576063 2026] [security2:error] [pid 4026248:tid 4026248] [client 2a0b:8bc0:2:2b38::1:53842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "francisautodetailing.com"] [uri "/.git/config"] [unique_id "ad1MRPVHKdBfAZIOaol_iwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 19:31:28
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 15:31:23.117075 2026] [security2:error] [pid 943741:tid 943741] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 15:31:23.117075 2026] [security2:error] [pid 943741:tid 943741] [client 2a0b:8bc0:2:2b38::1:41954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fractalsky.com"] [uri "/.env"] [unique_id "ad1EixdROZp1KjO851uhbgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 19:03:45
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 15:03:39.454002 2026] [security2:error] [pid 3925190:tid 3925190] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 15:03:39.454002 2026] [security2:error] [pid 3925190:tid 3925190] [client 2a0b:8bc0:2:2b38::1:10146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foxmm.com"] [uri "/.env"] [unique_id "ad0-C49vyqxnF0pQrk3djgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 18:40:13
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:40:03.232236 2026] [security2:error] [pid 2119616:tid 2119616] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:40:03.232236 2026] [security2:error] [pid 2119616:tid 2119616] [client 2a0b:8bc0:2:2b38::1:39664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fourhillsco.com"] [uri "/.env.local"] [unique_id "ad04g9SEvHY9jWBOu0gaewAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 18:16:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:16:01.469622 2026] [security2:error] [pid 3767093:tid 3767093] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:16:01.469622 2026] [security2:error] [pid 3767093:tid 3767093] [client 2a0b:8bc0:2:2b38::1:59534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fotosirel.com"] [uri "/.git/config"] [unique_id "ad0y4Qrh_MGOewqCHt1mQgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-04-13 18:02:07
UTC ·
(6 months ago)
(mod_security) mod_security (id:949110) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 15:45:51
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 11:45:46.925739 2026] [security2:error] [pid 3656579:tid 3656579] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:2b38::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 11:45:46.925739 2026] [security2:error] [pid 3656579:tid 3656579] [client 2a0b:8bc0:2:2b38::1:37264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ds12bonn.de"] [uri "/backend/.env"] [unique_id "ad0Pqv1K3ulsigVFB4kEYAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack