🇺🇸
TPI-Abuse
2026-04-30 10:43:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:43:15.744803 2026] [security2:error] [pid 28524:tid 28524] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:43:15.744803 2026] [security2:error] [pid 28524:tid 28524] [client 2a0b:8bc0:2:72b1::1:3460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.zavijava.net"] [uri "/.env"] [unique_id "afMyQ_aEh49-fSDfqp-aegAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 10:10:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:09:55.086494 2026] [security2:error] [pid 5572:tid 5594] [client 2a0b:8bc0:2: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:09:55.086494 2026] [security2:error] [pid 5572:tid 5594] [client 2a0b:8bc0:2:72b1::1:64872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.asetiadi.net"] [uri "/.env.production"] [unique_id "afMqc-J3ctUbGNiUXaaDBwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
wteiken
2026-04-30 09:43:42
(5 months ago)
2026-04-30T05:43:35.820030-04:00 nostromo.teiken.net kernel: [145788.975196] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0b:8bc0:0002:72b1:0000:0000:0000:0001 DST=2600:4041:5c7f:53ff:0000:0000:0000:0001 LEN=80 TC=40 H ...
show more
2026-04-30T05:43:35.820030-04:00 nostromo.teiken.net kernel: [145788.975196] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0b:8bc0:0002:72b1:0000:0000:0000:0001 DST=2600:4041:5c7f:53ff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=62147 PROTO=TCP SPT=42452 DPT=443 WINDOW=21600 RES=0x00 SYN URGP=0
2026-04-30T05:43:36.840016-04:00 nostromo.teiken.net kernel: [145789.995075] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0b:8bc0:0002:72b1:0000:0000:0000:0001 DST=2600:4041:5c7f:53ff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=231058 PROTO=TCP SPT=42452 DPT=443 WINDOW=21600 RES=0x00 SYN URGP=0
2026-04-30T05:43:37.850012-04:00 nostromo.teiken.net kernel: [145791.005059] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:86:dd SRC=2a0b:8bc0:0002:72b1:0000:0000:0000:0001 DST=2600:4041:5c7f:53ff:0000:0000:0000:0001 LEN=80 TC=40 HOPLIMIT=54 FLOWLBL=10984 PROTO=TCP SPT=42452 DPT=443 WINDOW=21600 RES=0x00
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-04-30 09:27:50
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 05:27:44.462373 2026] [security2:error] [pid 19222:tid 19222] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 05:27:44.462373 2026] [security2:error] [pid 19222:tid 19222] [client 2a0b:8bc0:2:72b1::1:38476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.daydar.net"] [uri "/.env"] [unique_id "afMgkG8bWIKsVBYBpzi8lQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-04-30 07:27:14
(5 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 05:06:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 01:06:14.980072 2026] [security2:error] [pid 25015:tid 25015] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 01:06:14.980072 2026] [security2:error] [pid 25015:tid 25015] [client 2a0b:8bc0:2:72b1::1:46348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.meliaethelwoodard.com"] [uri "/.env.local"] [unique_id "afLjRoTfgPzCVp6oQGK06QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 04:14:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:14:17.957010 2026] [security2:error] [pid 10511:tid 10511] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 00:14:17.957010 2026] [security2:error] [pid 10511:tid 10511] [client 2a0b:8bc0:2:72b1::1:39952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.debradamico.com"] [uri "/.env"] [unique_id "afLXGepmFvlgKGWzGuvqMgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 03:43:00
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:42:54.082222 2026] [security2:error] [pid 9408:tid 9408] [client 2a0b:8bc0:2: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:42:54.082222 2026] [security2:error] [pid 9408:tid 9408] [client 2a0b:8bc0:2:72b1::1:63268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.airedaleflyer.com"] [uri "/.env"] [unique_id "afLPvnCz2psY_ZdqV3r4aQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 03:09:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:09:16.682981 2026] [security2:error] [pid 15780:tid 15780] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 23:09:16.682981 2026] [security2:error] [pid 15780:tid 15780] [client 2a0b:8bc0:2:72b1::1:19220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teamulrich.com"] [uri "/.env.production"] [unique_id "afLH3LP61hJui2o9rh3HngAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 02:27:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:27:02.210859 2026] [security2:error] [pid 23643:tid 23678] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:27:02.210859 2026] [security2:error] [pid 23643:tid 23678] [client 2a0b:8bc0:2:72b1::1:44864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robotlandthemovie.plumeraproductions.com"] [uri "/.env"] [unique_id "afK99kr0KHybK5M3brqEHgAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 02:11:09
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:11:01.678673 2026] [security2:error] [pid 5687:tid 5687] [client 2a0b:8bc0:2: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:11:01.678673 2026] [security2:error] [pid 5687:tid 5687] [client 2a0b:8bc0:2:72b1::1:52960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pascoyardsale.com"] [uri "/.env"] [unique_id "afK6NUS3F7JOCF4E471MkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 01:55:59
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:55:53.401241 2026] [security2:error] [pid 2479:tid 2479] [client 2a0b:8bc0:2: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:55:53.401241 2026] [security2:error] [pid 2479:tid 2479] [client 2a0b:8bc0:2:72b1::1:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.perl-photo.com"] [uri "/.env"] [unique_id "afK2qVzqRKsYDIHCjuznPgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 01:10:18
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:10:12.313950 2026] [security2:error] [pid 17567:tid 17567] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:10:12.313950 2026] [security2:error] [pid 17567:tid 17567] [client 2a0b:8bc0:2:72b1::1:28970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wallpaperpro.com"] [uri "/backend/.env"] [unique_id "afKr9P-7SdTuLBxRpk6X_AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 00:25:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 20:25:30.757539 2026] [security2:error] [pid 14262:tid 14262] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 20:25:30.757539 2026] [security2:error] [pid 14262:tid 14262] [client 2a0b:8bc0:2:72b1::1:16608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kuddlkat.com"] [uri "/.env"] [unique_id "afKherlXdE4FzGgfCd7r8AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 23:50:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:50:16.591244 2026] [security2:error] [pid 18520:tid 18520] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:72b1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 19:50:16.591244 2026] [security2:error] [pid 18520:tid 18520] [client 2a0b:8bc0:2:72b1::1:9224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ttlatl.com"] [uri "/.env"] [unique_id "afKZOIDopZ80rSKOwpGh0gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack