πΊπΈ
TPI-Abuse
2026-04-13 20:19:29
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:19:23.649912 2026] [security2:error] [pid 2775114:tid 2775114] [client 2a0b:8bc0:2:b562::1:55512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dannyvanryswyk.com"] [uri "/backend/.env"] [unique_id "ad1Py6QT9CIosZ-bM0M4pQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
LRob
2026-04-13 20:00:05
(5 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-04-13 18:17:48
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:17:40.265750 2026] [security2:error] [pid 77598:tid 77598] [client 2a0b:8bc0:2:b562::1:54432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingmountainsbrewing.com"] [uri "/.git/config"] [unique_id "ad0zRCzbAvJitvCGSzCF9gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-13 17:48:26
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 13:48:21.249946 2026] [security2:error] [pid 2689887:tid 2689887] [client 2a0b:8bc0:2:b562::1:30102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danafrostick.com"] [uri "/.git/config"] [unique_id "ad0sZSVE_t2JLrt5V1FUbQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-13 16:38:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 12:38:27.675813 2026] [security2:error] [pid 1233835:tid 1233835] [client 2a0b:8bc0:2:b562::1:8500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dalebeyer.com"] [uri "/.env.dev"] [unique_id "ad0cA4rpmz11wd9DQRyUTwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-13 16:06:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 12:05:58.420094 2026] [security2:error] [pid 472784:tid 472784] [client 2a0b:8bc0:2:b562::1:14350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dailytailadventures.com"] [uri "/.env.dev"] [unique_id "ad0UZtfNQbIMK17l8zdxywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
BlueWire Hosting
2026-04-13 15:51:09
(5 months ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
πΊπΈ
mashamal
2026-04-13 15:29:40
(5 months ago)
Vulnerability Probe
...
Web App Attack
π©πͺ
filstal.org
2026-04-13 15:16:22
(5 months ago)
CrowdSec-Report: crowdsecurity/http-sensitive-files
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-13 15:04:59
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 11:04:52.114413 2026] [security2:error] [pid 1140141:tid 1140141] [client 2a0b:8bc0:2:b562::1:4986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daddysmilkclub.com"] [uri "/src/.env"] [unique_id "ad0GFPC2pNW89CVBzqAF9gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
antlac1
2026-04-13 13:35:29
(5 months ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
πΊπΈ
myagent.site
2026-04-13 13:22:15
(5 months ago)
Blocking for trying to access an exploit file: /.aws/credentials
Hacking
πΊπΈ
TPI-Abuse
2026-04-13 13:20:37
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 09:20:31.766618 2026] [security2:error] [pid 3811417:tid 3811434] [client 2a0b:8bc0:2:b562::1:10050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurefinishes.com"] [uri "/src/.env"] [unique_id "adztn7EVFQQBnii4b_tS0AAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-13 13:01:47
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:b562::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 09:01:41.927962 2026] [security2:error] [pid 2397428:tid 2397428] [client 2a0b:8bc0:2:b562::1:43084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclelytz.com"] [uri "/src/.env"] [unique_id "adzpNT8suM-5XFR5bNYtmgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
dynamix
2026-04-13 12:58:47
(5 months ago)
Multiple WAF Violations
Web App Attack