|
🇮🇳
34.93.134.45
|
|
(mod_security) mod_security (id:210492) triggered by 34.93.134.45 (45.134.93.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.134.45 (45.134.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:56:21.146780 2026] [security2:error] [pid 21839:tid 21839] [client 34.93.134.45:49708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ae5cp.kreweofhyatt.com"] [uri "/.git/config"] [unique_id "autVpZsqXuTj1pqHnCC46AAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.82.116.186
|
|
(mod_security) mod_security (id:210492) triggered by 34.82.116.186 (186.116.82.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.116.186 (186.116.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:56:16.596795 2026] [security2:error] [pid 20190:tid 20190] [client 34.82.116.186:35852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visithastingsvillage.com"] [uri "/.git/config"] [unique_id "autVoElPBulXJRW0wF1KPwAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.79.11.95
|
|
(mod_security) mod_security (id:210730) triggered by 47.79.11.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.11.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:55:32.943068 2026] [security2:error] [pid 2102:tid 2102] [client 47.79.11.95:49036] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||williamfitzsimmons.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/news/0208-william-fitzsimmons-releases-lions/themodclub.com"] [unique_id "autVdLvN7UyCghQ_yEA41wAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
34.131.6.160
|
|
(mod_security) mod_security (id:210492) triggered by 34.131.6.160 (160.6.131.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.6.160 (160.6.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:55:27.026510 2026] [security2:error] [pid 514:tid 514] [client 34.131.6.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.365soft.top"] [uri "/.git/config"] [unique_id "autVbzCPe_TmVDIzqd95_QAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
122.8.47.19
|
|
(mod_security) mod_security (id:210350) triggered by 122.8.47.19 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.47.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:55:04.381931 2026] [security2:error] [pid 19834:tid 19834] [client 122.8.47.19:21407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yogitunes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yogitunes.com"] [uri "/content/sunrise-flow"] [unique_id "autVWBkn4OHPaD-EGdyLEwAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
36.212.98.179
|
|
(mod_security) mod_security (id:210730) triggered by 36.212.98.179 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 36.212.98.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:49.360984 2026] [security2:error] [pid 9928:tid 9928] [client 36.212.98.179:19688] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.onward.ws|F|2"] [data ".dockwa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.onward.ws"] [uri "/WebsiteTest/BulletList/page/www.dockwa.com"] [unique_id "autVSYx-BLPor3VoYPEMZgAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
155.212.37.245
|
|
(mod_security) mod_security (id:210350) triggered by 155.212.37.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:56.653236 2026] [security2:error] [pid 19025:tid 19025] [client 155.212.37.245:53755] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yogitunes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yogitunes.com"] [uri "/content/sunrise-flow"] [unique_id "autVUKg_cBw6cAv1tGjpOQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
93.177.119.120
|
|
(mod_security) mod_security (id:210350) triggered by 93.177.119.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:49.402591 2026] [security2:error] [pid 18972:tid 18972] [client 93.177.119.120:62049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yogitunes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yogitunes.com"] [uri "/content/sunrise-flow"] [unique_id "autVSeUzmOudxYN0JS_1ZwAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
58.87.80.143
|
|
(mod_security) mod_security (id:210730) triggered by 58.87.80.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 58.87.80.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:43.422206 2026] [security2:error] [pid 9136:tid 9136] [client 58.87.80.143:50620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.onward.ws|F|2"] [data ".dockwa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.onward.ws"] [uri "/WebsiteTest/BulletList/page/www.dockwa.com"] [unique_id "autVQ1J8PjHQ3p_xkjzUUQAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇰
175.107.211.3
|
|
(mod_security) mod_security (id:210350) triggered by 175.107.211.3 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 175.107.211.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:15.609098 2026] [security2:error] [pid 518:tid 518] [client 175.107.211.3:23093] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||periodpiano.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodpiano.org"] [uri "/html/undiscovered_early_steinways.html"] [unique_id "autVJ7gOUW0vH94f0RlELwAAAAo"], referer: https://periodpiano.org/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇬
47.82.53.26
|
|
(mod_security) mod_security (id:210730) triggered by 47.82.53.26 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 47.82.53.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:07.730573 2026] [security2:error] [pid 12542:tid 12542] [client 47.82.53.26:59344] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Bristol II/Stetson Bordeaux/Thumbs.db"] [unique_id "autVH1d8Jx7txeb4ffLS7gAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇭
193.32.127.215
|
|
(mod_security) mod_security (id:225170) triggered by 193.32.127.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.32.127.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:54:04.691042 2026] [security2:error] [pid 7358:tid 7358] [client 193.32.127.215:58765] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hydrometal-js.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hydrometal-js.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "autVHMmKUSUtMyrEDimJLgAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.98.143.69
|
|
(mod_security) mod_security (id:210492) triggered by 34.98.143.69 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 34.98.143.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:50.079703 2026] [security2:error] [pid 30703:tid 30703] [client 34.98.143.69:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVDgDGM3QgPI2evEmZ2wAAABE"], referer: http://forsaleincr.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.98.143.74
|
|
(mod_security) mod_security (id:210492) triggered by 34.98.143.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 34.98.143.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:49.914712 2026] [security2:error] [pid 29971:tid 29971] [client 34.98.143.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVDZq9QMNwHXybecfzmAAAAAA"], referer: http://forsaleincr.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
146.19.37.152
|
|
(mod_security) mod_security (id:210492) triggered by 146.19.37.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.19.37.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:46.748235 2026] [security2:error] [pid 30982:tid 30982] [client 146.19.37.152:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVCu5vQm7xQMtRbcQ6fgAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
172.121.129.0
|
|
(mod_security) mod_security (id:210492) triggered by 172.121.129.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.121.129.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:43.130124 2026] [security2:error] [pid 29282:tid 29282] [client 172.121.129.0:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVB1V-3v2pxqRA1wbw7QAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.98.143.68
|
|
(mod_security) mod_security (id:210492) triggered by 34.98.143.68 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 34.98.143.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:39.903756 2026] [security2:error] [pid 29282:tid 29282] [client 34.98.143.68:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVA1V-3v2pxqRA1wbw7AAAAA4"], referer: http://forsaleincr.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.31.186.92
|
|
(mod_security) mod_security (id:210492) triggered by 34.31.186.92 (92.186.31.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.31.186.92 (92.186.31.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:46.939269 2026] [security2:error] [pid 30314:tid 30314] [client 34.31.186.92:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVCh08TThNSJI68C-5bAAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇯🇵
147.185.226.14
|
|
(mod_security) mod_security (id:210492) triggered by 147.185.226.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 147.185.226.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:47.969480 2026] [security2:error] [pid 30314:tid 30314] [client 147.185.226.14:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVCx08TThNSJI68C-5bQAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
66.249.70.136
|
|
(mod_security) mod_security (id:210492) triggered by 66.249.70.136 (crawl-66-249-70-136.googlebot.co ...
show more
(mod_security) mod_security (id:210492) triggered by 66.249.70.136 (crawl-66-249-70-136.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:44.024049 2026] [security2:error] [pid 29760:tid 29760] [client 66.249.70.136:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVCJAMhuBVea_VpA968gAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
185.152.39.14
|
|
(mod_security) mod_security (id:210492) triggered by 185.152.39.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.152.39.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:45.431160 2026] [security2:error] [pid 30982:tid 30982] [client 185.152.39.14:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVCe5vQm7xQMtRbcQ6fQAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.98.143.72
|
|
(mod_security) mod_security (id:210492) triggered by 34.98.143.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 34.98.143.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:40.106388 2026] [security2:error] [pid 28469:tid 28469] [client 34.98.143.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVBI5yyVNjRNoFUAnNuwAAAAI"], referer: http://forsaleincr.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
54.70.53.60
|
|
(mod_security) mod_security (id:210492) triggered by 54.70.53.60 (ec2-54-70-53-60.us-west-2.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 54.70.53.60 (ec2-54-70-53-60.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:40.872889 2026] [security2:error] [pid 30687:tid 30687] [client 54.70.53.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVBFRoPMqpM_nd0Wbk_AAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
3.15.221.58
|
|
(mod_security) mod_security (id:210492) triggered by 3.15.221.58 (ec2-3-15-221-58.us-east-2.compute. ...
show more
(mod_security) mod_security (id:210492) triggered by 3.15.221.58 (ec2-3-15-221-58.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:40.797135 2026] [security2:error] [pid 29744:tid 29744] [client 3.15.221.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVBHU9srW7o1Kw8MhRyQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
3.142.90.169
|
|
(mod_security) mod_security (id:210492) triggered by 3.142.90.169 (ec2-3-142-90-169.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.142.90.169 (ec2-3-142-90-169.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:53:40.785797 2026] [security2:error] [pid 30702:tid 30702] [client 3.142.90.169:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forsaleincr.com"] [uri "/.env"] [unique_id "autVBCDgqWihbfuPrmwiFQAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|