🇧🇪
cmbplf
2026-06-22 10:37:21
(1 hour ago)
126 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-22 10:26:56
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 06:26:51.420556 2026] [security2:error] [pid 21839:tid 21839] [client 65.110.40.143:41990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.airbagdesigns.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.airbagdesigns.com"] [uri "/wp-content/debug.log"] [unique_id "ajkN668G92W3WEnX_WD3hQAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 09:44:24
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 05:44:17.821263 2026] [security2:error] [pid 14513:tid 14513] [client 65.110.40.143:32446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elgarage.elpais.mx"] [uri "/.env.production.copy"] [unique_id "ajkD8XoMANvpSdVXh3WHsgAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-06-22 09:41:29
(2 hours ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 08:28:04
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 04:27:55.917457 2026] [security2:error] [pid 32723:tid 32723] [client 65.110.40.143:19470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dynamic-therapy-mn.com"] [uri "/.env.production.copy"] [unique_id "ajjyCysDq4qqNy61n2VpYwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 07:07:25
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 03:07:20.727113 2026] [security2:error] [pid 4671:tid 4671] [client 65.110.40.143:11314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.weathercarib.net"] [uri "/.env.production.copy"] [unique_id "ajjfKDH1VyFsHAYwNwBwPwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 06:14:03
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 02:14:00.532041 2026] [security2:error] [pid 19789:tid 19789] [client 65.110.40.143:5158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aim-controls.com"] [uri "/.env.production.copy"] [unique_id "ajjSqG2wZi-ibOnMNS4kqAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 05:51:39
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 01:51:33.819890 2026] [security2:error] [pid 18866:tid 18866] [client 65.110.40.143:59828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schmitzcomm.net"] [uri "/.env.production.save"] [unique_id "ajjNZX_RiE83P-4zHODT_QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 04:48:09
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 00:48:02.127313 2026] [security2:error] [pid 13939:tid 13939] [client 65.110.40.143:28654] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.mikechilders.me|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mikechilders.me"] [uri "/wp-content/debug.log"] [unique_id "aji-gusZfxRrZdKWsUPFPgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-06-22 02:13:46
(9 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.110.40.143 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.110.40.143 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇬🇧
Celtic
2026-06-22 01:15:32
(10 hours ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇬🇧
andypiper
2026-06-22 01:01:17
(10 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 00:48:14
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 20:48:11.191777 2026] [security2:error] [pid 1585:tid 1585] [client 65.110.40.143:46232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horneman.org"] [uri "/.env.production.copy"] [unique_id "ajiGS9QGAUMUGRPwY9eh7wAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-22 00:15:07
(11 hours ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇳🇱
debestelapp
2026-06-21 23:10:06
(12 hours ago)
Web App Attack