🇺🇸
TPI-Abuse
2026-04-16 11:30:05
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 07:29:57.632515 2026] [security2:error] [pid 8496:tid 8540] [client 2a0b:8bc0:2: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 07:29:57.632515 2026] [security2:error] [pid 8496:tid 8540] [client 2a0b:8bc0:2:dc22::1:46608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wakhan-adventure.com"] [uri "/.env"] [unique_id "aeDINcV1S0IT4CdbN4e2hAAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ketovoila.pl
2026-04-16 11:07:16
UTC ·
(6 months ago)
ketovoila.pl HONEYPOT traffic: count=7, paths=6; sample_path=ketovoila.pl/; UA=Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0; window=2026-04-16T10:28:21Z..2026-04-16T10:28:20Z
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-04-16 10:57:50
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:57:45.459839 2026] [security2:error] [pid 2952117:tid 2952117] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:57:45.459839 2026] [security2:error] [pid 2952117:tid 2952117] [client 2a0b:8bc0:2:dc22::1:28928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastquizmaker.com"] [uri "/backend/.env"] [unique_id "aeDAqdqYJg1fyNTS50x7nwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 10:40:24
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:40:18.270571 2026] [security2:error] [pid 120806:tid 120806] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:40:18.270571 2026] [security2:error] [pid 120806:tid 120806] [client 2a0b:8bc0:2:dc22::1:38876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boxfactorylofts.com"] [uri "/.env.production"] [unique_id "aeC8kr7AEthBzEFU3D24NgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 10:15:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:15:00.111746 2026] [security2:error] [pid 1223753:tid 1223753] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 06:15:00.111746 2026] [security2:error] [pid 1223753:tid 1223753] [client 2a0b:8bc0:2:dc22::1:36898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holesandcorners.com"] [uri "/laravel/.env"] [unique_id "aeC2pPfx2YKr3Jj9tj9pawAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 09:46:23
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:46:19.592091 2026] [security2:error] [pid 1727445:tid 1727445] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:46:19.592091 2026] [security2:error] [pid 1727445:tid 1727445] [client 2a0b:8bc0:2:dc22::1:38080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "needtoorderprinting.com"] [uri "/.env"] [unique_id "aeCv6zFC2CYGaF56fUecaAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-04-16 09:28:13
UTC ·
(6 months ago)
1.120 requests with url.path *.env
708 requests with url.path *config.json
268 requests with url.path *credentials.json
265 requests with url.path *secrets.json
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-16 09:20:21
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:20:15.383616 2026] [security2:error] [pid 374812:tid 374820] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:20:15.383616 2026] [security2:error] [pid 374812:tid 374820] [client 2a0b:8bc0:2:dc22::1:13138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonysergio.com"] [uri "/api/.env"] [unique_id "aeCpzwMqEORNyySOs4nxOgAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 09:01:58
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:01:51.259657 2026] [security2:error] [pid 50660:tid 50660] [client 2a0b:8bc0: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 05:01:51.259657 2026] [security2:error] [pid 50660:tid 50660] [client 2a0b:8bc0:2:dc22::1:6726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citati.net"] [uri "/.env"] [unique_id "aeClfyZz0ZRTUpZb8efCkQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 08:21:04
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 04:20:57.193616 2026] [security2:error] [pid 3021058:tid 3021058] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 04:20:57.193616 2026] [security2:error] [pid 3021058:tid 3021058] [client 2a0b:8bc0:2:dc22::1:47740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gictd.com"] [uri "/laravel/.env"] [unique_id "aeCb6eC_CysnrHHjan-djgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-04-16 08:12:29
UTC ·
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -35.154 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-16 08:05:06
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 04:04:56.262352 2026] [security2:error] [pid 3776911:tid 3776911] [client 2a0b:8 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 04:04:56.262352 2026] [security2:error] [pid 3776911:tid 3776911] [client 2a0b:8bc0:2:dc22::1:16428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabecocont.com"] [uri "/.env"] [unique_id "aeCYKOV2I40a93P9347wMwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 07:46:55
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 03:46:51.593932 2026] [security2:error] [pid 736804:tid 736804] [client 2a0b:8bc ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:8bc0:2:dc22::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 03:46:51.593932 2026] [security2:error] [pid 736804:tid 736804] [client 2a0b:8bc0:2:dc22::1:24820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lincolnsoftwareinc.com"] [uri "/.env"] [unique_id "aeCT64aHuUjZXCr4yPuX5gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-04-16 07:37:04
UTC ·
(6 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Mangelot Hosting
2026-04-16 07:36:12
UTC ·
(6 months ago)
(modsecurity) srv103 ModSecurity 2a0b:8bc0:2:dc22::1 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack