๐บ๐ธ
TPI-Abuse
2026-06-10 12:40:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:40:21.391035 2026] [security2:error] [pid 30332:tid 30332] [client 51.68.240.51:57556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emsahara.org"] [uri "/.env"] [unique_id "ailbNV03C-6gyi4oeG8S5gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฑ๐น
NotACaptcha
2026-06-10 12:38:30
(1 day ago)
webserver:80 [10/Jun/2026] "GET /.env HTTP/1.1" 302 459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X ...
show more
webserver:80 [10/Jun/2026] "GET /.env HTTP/1.1" 302 459 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 12:23:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:22:55.959085 2026] [security2:error] [pid 23730:tid 23730] [client 51.68.240.51:53854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazeconsultants.org"] [uri "/.env"] [unique_id "ailXH2Fdn3MViTZ8ExscPgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 11:51:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:51:22.175455 2026] [security2:error] [pid 28991:tid 28991] [client 51.68.240.51:53490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "epscalltoaction.org"] [uri "/.env"] [unique_id "ailPusrbc8mjGBfIyYUGggAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 11:36:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:36:15.026172 2026] [security2:error] [pid 25061:tid 25061] [client 51.68.240.51:60289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elderlyassociation.org"] [uri "/.env"] [unique_id "ailML57Hg63ojvyWLR7rzQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 10:42:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:42:45.199382 2026] [security2:error] [pid 10611:tid 10611] [client 51.68.240.51:50349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunbartonucc.org"] [uri "/.env"] [unique_id "aik_pfnVOrPYBBJbf-mz6gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 10:22:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 06:22:24.746424 2026] [security2:error] [pid 26724:tid 26724] [client 51.68.240.51:59651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avalonestates.org"] [uri "/.env"] [unique_id "aik64Fv9Or0is42tSsAFRgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 09:47:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:47:47.552736 2026] [security2:error] [pid 12375:tid 12375] [client 51.68.240.51:52367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assembliesofgodinsamoa.org"] [uri "/.env"] [unique_id "aikyw5OfUgOxYHI-wv6qjQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 09:01:59
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 05:01:53.329261 2026] [security2:error] [pid 25172:tid 25172] [client 51.68.240.51:55518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doorofhopechurch.org"] [uri "/.env"] [unique_id "aikoAdpS32nMU-qQKnI4NQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 22:06:03
(2 days ago)
Trying to access config files
Web App Attack
๐บ๐ธ
nyt
2026-06-09 21:14:10
(2 days ago)
Sensitive File Probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 21:11:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:11:09.958034 2026] [security2:error] [pid 9012:tid 9012] [client 51.68.240.51:60688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.org"] [uri "/.env"] [unique_id "aiiBbRGEi1YWlXScAAk2FwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 20:28:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:28:12.449321 2026] [security2:error] [pid 28896:tid 28896] [client 51.68.240.51:52407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agworldmissions.org"] [uri "/.env"] [unique_id "aih3XDj2_jSWqFbksJ3evwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 17:03:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 13:03:06.290683 2026] [security2:error] [pid 21749:tid 21749] [client 51.68.240.51:64127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "commonbridges.org"] [uri "/.env"] [unique_id "aiWkSnwz2hRccO3WzVKb_gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 16:39:01
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.68.240.51 (ns3257237.ip-51-68-240.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 12:38:56.074210 2026] [security2:error] [pid 27089:tid 27089] [client 51.68.240.51:52747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accsbg.org"] [uri "/.env"] [unique_id "aiWeoAg1Vq8G1nBBm8C35QAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack