🇺🇸
TPI-Abuse
2026-06-26 05:17:11
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:17:07.907847 2026] [security2:error] [pid 17060:tid 17060] [client 65.110.40.248:58170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alwayswetandsexy.grayhost.net"] [uri "/.env.production.orig"] [unique_id "aj4LU6LLgh0oPtVDRClztAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-26 04:09:04
(3 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 65.110.40.248 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-06-26 04:06:04
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 00:05:57.197748 2026] [security2:error] [pid 4172:tid 4172] [client 65.110.40.248:41654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nationalnova.com.sprektech.com"] [uri "/.env.production.copy"] [unique_id "aj36pTfoNZOIks98LsAXYAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 03:49:51
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 23:49:47.011691 2026] [security2:error] [pid 25872:tid 25872] [client 65.110.40.248:45440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.miranda-race-walks.com"] [uri "/.env.local.orig"] [unique_id "aj32200t9bE8lSkfApCPawAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 03:14:36
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 23:14:31.903032 2026] [security2:error] [pid 24424:tid 24424] [client 65.110.40.248:40386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.helpkccare.org"] [uri "/.env.production.copy"] [unique_id "aj3ul_F3Ui0_AlZq--2VIgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-06-26 01:35:28
(6 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:03:49
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:03:43.596989 2026] [security2:error] [pid 10995:tid 10995] [client 65.110.40.248:42804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdtstorage.gocdt.com"] [uri "/.env.local.swp"] [unique_id "aj3P7-XAPo0FYFZ0KSXzygAAAGQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-06-25 23:37:03
(8 hours ago)
Accessed trap at '/.aws/credentials'
Web App Attack
🇳🇱
sernate
2026-06-25 20:31:03
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (US/United States/-): 10 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Brute-Force
🇫🇷
masterguru
2026-06-25 19:46:17
(12 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 65.110.40.248 (CA/Canada/-): 1 in the ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 65.110.40.248 (CA/Canada/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-25 18:56:31
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 14:56:27.812585 2026] [security2:error] [pid 21173:tid 21181] [client 65.110.40.248:21034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.xxxmain.com"] [uri "/.env.production.copy"] [unique_id "aj1524yEvd9K-4xg40sqjwAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-25 15:05:57
(16 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 13:20:00
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:19:53.206251 2026] [security2:error] [pid 15099:tid 15099] [client 65.110.40.248:50908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integratic.com.co"] [uri "/.env.production.copy"] [unique_id "aj0q-Wee9txst2Xiu_jeRQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 12:05:50
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:05:45.025947 2026] [security2:error] [pid 21556:tid 21556] [client 65.110.40.248:4284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "downtownbluesprings.com.johnandramonadunn.com"] [uri "/.env.production.copy"] [unique_id "aj0ZmZrnVGZm4tB8ehj-0QAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 10:55:22
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.110.40.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 06:55:19.217546 2026] [security2:error] [pid 14564:tid 14574] [client 65.110.40.248:39286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lesleyhcampbell.com"] [uri "/.env.local.bak"] [unique_id "aj0JF0RofcWC64lyXd1jJwAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack