🇸🇪
DjKlazaplaza
2026-03-07 07:58:00
(4 months ago)
Brute-Force
2025-12-12 15:03:16
(7 months ago)
Web attack
Bad Web Bot
Web App Attack
2025-08-10 20:02:13
(11 months ago)
Web attack
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-11-20 17:04:31
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-11-14 20:00:12
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 14 15:00:06.989307 2024] [security2:error] [pid 1705:tid 1705] [client 104.28.130.166:42720] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.69"] [uri "/.env"] [unique_id "ZzZWxnIaSduwu8g3Cc7ZIwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-13 10:26:52
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 13 05:26:48.337603 2024] [security2:error] [pid 1122344:tid 1122344] [client 104.28.130.166:50654] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.100"] [uri "/.env"] [unique_id "ZzR-6L7jyCPFBYO27DqQnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MortimerCat
2024-11-13 10:18:30
(1 year ago)
Attempting to download environment file
Web App Attack
🇺🇸
TPI-Abuse
2024-11-08 18:11:30
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 08 13:11:26.108996 2024] [security2:error] [pid 19732:tid 19732] [client 104.28.130.166:29893] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.211"] [uri "/.env"] [unique_id "Zy5UTmdyAor5KkitOz0EhQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mhhdr
2024-11-07 23:14:27
(1 year ago)
Web attack: Environment Config File Download Attempt.
HEAD /.env.
Web App Attack
🇺🇸
TPI-Abuse
2024-11-06 20:15:17
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 06 15:15:11.794345 2024] [security2:error] [pid 5696:tid 5696] [client 104.28.130.166:25113] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.75"] [uri "/.env"] [unique_id "ZyvOT_2eFVUMbWa0tKBhggAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-05 20:06:13
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 05 15:06:05.414405 2024] [security2:error] [pid 32591:tid 32591] [client 104.28.130.166:42684] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.151"] [uri "/conf/.env"] [unique_id "Zyp6rb-ZgCCqd314Es_hpAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MortimerCat
2024-11-04 00:23:29
(1 year ago)
Attempting to download environment file
Web App Attack
🇺🇸
TPI-Abuse
2024-11-02 14:55:42
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 10:55:36.560243 2024] [security2:error] [pid 12924:tid 12924] [client 104.28.130.166:43212] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdijoe.com"] [uri "/.env"] [unique_id "ZyY9aDWja5SbWRgLwKU_dAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-02 11:28:55
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 07:28:50.182177 2024] [security2:error] [pid 21787:tid 21787] [client 104.28.130.166:32777] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jitterbugperfume.com"] [uri "/.env"] [unique_id "ZyYM8gKh3vZDEsFGyta6sAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-02 11:05:15
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.130.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 02 07:05:12.433462 2024] [security2:error] [pid 25768:tid 25768] [client 104.28.130.166:46313] [client 104.28.130.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonesandbones.net"] [uri "/.env"] [unique_id "ZyYHaFTMBTbeyHp_RlueeAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack