|
🇯🇵
34.104.205.194
|
|
(mod_security) mod_security (id:210492) triggered by 34.104.205.194 (194.205.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.205.194 (194.205.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:51.087210 2026] [security2:error] [pid 21644:tid 21644] [client 34.104.205.194:43776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mnalabama.com"] [uri "/.env"] [unique_id "aqpKW_yqmsr7Ak5PGqZGbAAAAAE"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇩
103.140.167.62
|
|
(mod_security) mod_security (id:210350) triggered by 103.140.167.62 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 103.140.167.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:46.242391 2026] [security2:error] [pid 6564:tid 6564] [client 103.140.167.62:35988] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bookingsouthafrica.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bookingsouthafrica.com"] [uri "/403.shtml"] [unique_id "aqpKVgIakpv6lBAN90m3KwAAAA4"], referer: https://infojeffreysbay.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
153.67.7.10
|
|
(mod_security) mod_security (id:210350) triggered by 153.67.7.10 (customer.bnssarg1.isp.starlink.com ...
show more
(mod_security) mod_security (id:210350) triggered by 153.67.7.10 (customer.bnssarg1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:48.341195 2026] [security2:error] [pid 9366:tid 9366] [client 153.67.7.10:11721] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.enchantmenttours.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.enchantmenttours.com"] [uri "/403.shtml"] [unique_id "aqpKWJ7HyxpLnaB9YTUMngAAAAk"], referer: https://dolphin-view.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
136.124.35.131
|
|
(mod_security) mod_security (id:210492) triggered by 136.124.35.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.124.35.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:43.746917 2026] [security2:error] [pid 2331802:tid 2331802] [client 136.124.35.131:12552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.htaccessa32567d4599944beba0f0216b003adff361400b5eaf44fc1b9ff28d834e5fc9ac69c6e850bf8498ea39b5f470366e876"] [unique_id "aqpKU3DPSCai-dyK0UMZJgAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇹🇼
34.80.76.14
|
|
(mod_security) mod_security (id:210492) triggered by 34.80.76.14 (14.76.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.76.14 (14.76.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:46.387352 2026] [security2:error] [pid 30177:tid 30177] [client 34.80.76.14:54650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.countertop.mooseled.com"] [uri "/.git/config"] [unique_id "aqpKVqDZd5UFUZvMUHDd0QAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
35.194.59.41
|
|
(mod_security) mod_security (id:210492) triggered by 35.194.59.41 (41.59.194.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.59.41 (41.59.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:46.018443 2026] [security2:error] [pid 15064:tid 15064] [client 35.194.59.41:35274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cams.boens.org"] [uri "/.git/config"] [unique_id "aqpKVjre1h9CNPj5doUM7AAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇳
41.83.102.20
|
|
(mod_security) mod_security (id:210350) triggered by 41.83.102.20 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 41.83.102.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:44.048407 2026] [security2:error] [pid 6613:tid 6613] [client 41.83.102.20:35414] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bookingsouthafrica.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bookingsouthafrica.com"] [uri "/"] [unique_id "aqpKVFBG3Em2Tm0qEaDb9QAAABY"], referer: https://infojeffreysbay.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇦
45.216.64.168
|
|
(mod_security) mod_security (id:210350) triggered by 45.216.64.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.216.64.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:44.802571 2026] [security2:error] [pid 9366:tid 9366] [client 45.216.64.168:46790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||enchantmenttours.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enchantmenttours.com"] [uri "/"] [unique_id "aqpKVJ7HyxpLnaB9YTUMnQAAAAk"], referer: https://dolphin-view.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
45.161.253.82
|
|
(mod_security) mod_security (id:210492) triggered by 45.161.253.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.161.253.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:22.618406 2026] [security2:error] [pid 24428:tid 24428] [client 45.161.253.82:40968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/storage/app/.env.prod"] [unique_id "aqpKPkCw-DgzxK7n9TtQ8gAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
34.152.45.192
|
|
(mod_security) mod_security (id:949110) triggered by 34.152.45.192 (192.45.152.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.152.45.192 (192.45.152.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:26.834552 2026] [security2:error] [pid 20539:tid 20539] [client 34.152.45.192:53512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "allhandswashservices.com"] [uri "/.git/config"] [unique_id "aqpKQodaYLsuFeZ3F-26JwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.249.66.192
|
|
(mod_security) mod_security (id:210381) triggered by 66.249.66.192 (crawl-66-249-66-192.googlebot.co ...
show more
(mod_security) mod_security (id:210381) triggered by 66.249.66.192 (crawl-66-249-66-192.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:25.078466 2026] [security2:error] [pid 11827:tid 11827] [client 66.249.66.192:64721] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.hijamadirectory.com|F|4"] [data "REQUEST_URI=/?wc-ajax=%%endpoint%%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hijamadirectory.com"] [uri "/"] [unique_id "aqpKQY6IalCwEhd5r2Y9GgAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
131.72.147.208
|
|
(mod_security) mod_security (id:210492) triggered by 131.72.147.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 131.72.147.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:17.963534 2026] [security2:error] [pid 24189:tid 24189] [client 131.72.147.208:3366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/storage/.env~"] [unique_id "aqpKOXOFoZATLIrbcfG48QAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇪
181.176.98.221
|
|
(mod_security) mod_security (id:210350) triggered by 181.176.98.221 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 181.176.98.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:22.825506 2026] [security2:error] [pid 13141:tid 13191] [client 181.176.98.221:16186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||managementconsultant.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "managementconsultant.us"] [uri "/"] [unique_id "aqpKPrpr7oZ3BdvW6xEAWQAAAlI"], referer: https://aaenroll.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
187.109.130.200
|
|
(mod_security) mod_security (id:210492) triggered by 187.109.130.200 (187-109-130-200-wlan.lpnet.com ...
show more
(mod_security) mod_security (id:210492) triggered by 187.109.130.200 (187-109-130-200-wlan.lpnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:19.722033 2026] [security2:error] [pid 21855:tid 21855] [client 187.109.130.200:50229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/storage/.env.sample"] [unique_id "aqpKO-sJr87Hx4xBNtJOXAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇽
153.67.119.210
|
|
(mod_security) mod_security (id:210492) triggered by 153.67.119.210 (customer.qrtomex1.isp.starlink. ...
show more
(mod_security) mod_security (id:210492) triggered by 153.67.119.210 (customer.qrtomex1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:21.812448 2026] [security2:error] [pid 25909:tid 25909] [client 153.67.119.210:59129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/storage/app/.env.development"] [unique_id "aqpKPXZSw_FRwuN9v5zgLAAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇨
177.234.195.229
|
|
(mod_security) mod_security (id:210492) triggered by 177.234.195.229 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 177.234.195.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:21.955503 2026] [security2:error] [pid 22017:tid 22017] [client 177.234.195.229:19020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/storage/app/.env.dev"] [unique_id "aqpKPU3-Dz9KFvXjLpTEUwAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇰🇪
2c0f:fe40:d009:3529:4ed7:c8ff:fefc:8bcd
|
|
(mod_security) mod_security (id:225170) triggered by 2c0f:fe40:d009:3529:4ed7:c8ff:fefc:8bcd (Unknow ...
show more
(mod_security) mod_security (id:225170) triggered by 2c0f:fe40:d009:3529:4ed7:c8ff:fefc:8bcd (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:17.497309 2026] [security2:error] [pid 28603:tid 28618] [client 2c0f:fe40:d009:3529:4ed7:c8ff:fefc:8bcd:49997] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.annacaird.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.annacaird.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqpKOSqY0bj6Xlx67SVTzQAAAMs"], referer: https://www.annacaird.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
34.154.86.134
|
|
(mod_security) mod_security (id:210492) triggered by 34.154.86.134 (134.86.154.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.86.134 (134.86.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:16.075971 2026] [security2:error] [pid 15976:tid 15976] [client 34.154.86.134:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.empoweruamerica.org"] [uri "/.git/config"] [unique_id "aqpKOEmURcAgpoSO_CqtegAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇰🇷
34.50.18.248
|
|
(mod_security) mod_security (id:210492) triggered by 34.50.18.248 (248.18.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.18.248 (248.18.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:12.298399 2026] [security2:error] [pid 23089:tid 23089] [client 34.50.18.248:44416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mydobdate.com"] [uri "/.env"] [unique_id "aqpKNPl5iJbGdSz7zzOLZgAAAAE"], referer: https://www.google.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇯🇵
35.187.205.35
|
|
(mod_security) mod_security (id:210492) triggered by 35.187.205.35 (35.205.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.205.35 (35.205.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:15.417349 2026] [security2:error] [pid 4590:tid 4590] [client 35.187.205.35:49626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barkoskieelectric.com.bacpool.com"] [uri "/.git/config"] [unique_id "aqpKNwOG8zn3I-EnmA9T5AAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
177.8.142.203
|
|
(mod_security) mod_security (id:210492) triggered by 177.8.142.203 (dynamic-177-8-142-203.turbotelec ...
show more
(mod_security) mod_security (id:210492) triggered by 177.8.142.203 (dynamic-177-8-142-203.turbotelecomprovedordns.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:48:19.169451 2026] [security2:error] [pid 16681:tid 16681] [client 177.8.142.203:24145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/server/.env.stage"] [unique_id "aqpJw5-rxzP-rPY7xT5oWwAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇯🇵
34.180.117.216
|
|
(mod_security) mod_security (id:210492) triggered by 34.180.117.216 (216.117.180.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.117.216 (216.117.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:05.993231 2026] [security2:error] [pid 16474:tid 16474] [client 34.180.117.216:35190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infinite-a.com"] [uri "/.git/config"] [unique_id "aqpKLZahr0sBzosaZVJRtgAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
83.97.117.215
|
|
(mod_security) mod_security (id:225170) triggered by 83.97.117.215 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 83.97.117.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:02.657763 2026] [security2:error] [pid 10511:tid 10511] [client 83.97.117.215:52223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realsugardaddy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realsugardaddy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqpKKk5V-PLE1J-GTP2cgwAAAA0"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇯🇵
34.97.133.254
|
|
(mod_security) mod_security (id:210492) triggered by 34.97.133.254 (254.133.97.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.133.254 (254.133.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:50:00.857161 2026] [security2:error] [pid 25078:tid 25078] [client 34.97.133.254:38802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildemar.info"] [uri "/.git/config"] [unique_id "aqpKKNFkaxj9KnJkfG_d5gAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇿
41.96.125.27
|
|
(mod_security) mod_security (id:210492) triggered by 41.96.125.27 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 41.96.125.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:48:01.953181 2026] [security2:error] [pid 16120:tid 16120] [client 41.96.125.27:42338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hker.hongkonger.org"] [uri "/backend/app/.env.save"] [unique_id "aqpJsR5hX-4PzclMmImh8QAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|