TPI-Abuse
2025-06-15 15:25:12
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 11:25:07.096473 2025] [security2:error] [pid 397399:tid 397399] [client 173.239.224.37:22373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ammatusk.com"] [uri "/.env"] [unique_id "aE7l04XwZQDdBw0ISs6QrwAAAAw"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 14:21:16
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 10:21:12.691407 2025] [security2:error] [pid 1236324:tid 1236324] [client 173.239.224.37:20491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittencream.com"] [uri "/.env"] [unique_id "aE7W2MTZ08hWhoxOZEgyawAAAA8"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 13:11:31
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 15 09:11:27.798479 2025] [security2:error] [pid 1877350:tid 1877350] [client 173.239.224.37:4891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "csems.org"] [uri "/.env"] [unique_id "aE7Gf87Sr0xwmyvM7do5kAAAAAY"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 03:19:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 23:19:47.243746 2025] [security2:error] [pid 708288:tid 708366] [client 173.239.224.37:5651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koliosfoods.com"] [uri "/.env"] [unique_id "aE4705_XAhMNaK-fBEbgywAAAYU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-15 00:45:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 20:45:53.108120 2025] [security2:error] [pid 4029118:tid 4029118] [client 173.239.224.37:37623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shiverdigital.com"] [uri "/.env"] [unique_id "aE4XwZb6_rxw1ZYmi1AOpgAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 22:31:00
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 18:30:53.421293 2025] [security2:error] [pid 3333488:tid 3333488] [client 173.239.224.37:14997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artsun.com"] [uri "/.env"] [unique_id "aE34HWWdHndkNJHRsHUJRAAAACA"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 22:09:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 18:09:45.112490 2025] [security2:error] [pid 2392061:tid 2392061] [client 173.239.224.37:30253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rice-tech.com"] [uri "/.env"] [unique_id "aE3zKb7oLxpon_EkMCyRsAAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 21:34:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 17:34:42.691914 2025] [security2:error] [pid 3483646:tid 3483646] [client 173.239.224.37:20371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jiveturkeyband.com"] [uri "/.env"] [unique_id "aE3q8jhMh4c_WxPAc-VibAAAAAc"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 20:40:16
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 16:40:10.466000 2025] [security2:error] [pid 323090:tid 323090] [client 173.239.224.37:13007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blucielocapital.com"] [uri "/.env"] [unique_id "aE3eKg80_dkfCRnc6at5yQAAABE"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 20:24:13
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 16:24:06.761033 2025] [security2:error] [pid 3699820:tid 3699820] [client 173.239.224.37:64685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamworldmovements.com"] [uri "/.env"] [unique_id "aE3aZmiqNo7tNpaaSyULjwAAAAE"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 19:34:14
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 15:34:09.251704 2025] [security2:error] [pid 2260535:tid 2260535] [client 173.239.224.37:55271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toepert.com"] [uri "/.env"] [unique_id "aE3OsZoZ_xTeHB7bpwJo3wAAABM"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 11:35:09
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 07:35:05.042916 2025] [security2:error] [pid 2271687:tid 2271687] [client 173.239.224.37:39359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toxicwater.com"] [uri "/.env"] [unique_id "aE1eaaSNwM17e-Ao7O6IgQAAAAc"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-14 09:24:02
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 14 05:23:58.085413 2025] [security2:error] [pid 1886811:tid 1886811] [client 173.239.224.37:32411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ladymcollection.com"] [uri "/.env"] [unique_id "aE0_rvrqNoY9dJw7Yk_lHgAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
Tripwire
2025-06-14 04:37:33
(3 weeks ago)
Scanning for exploits - /.env
Web App Attack
TPI-Abuse
2025-06-14 03:29:42
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 173.239.224.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 13 23:29:39.697932 2025] [security2:error] [pid 676332:tid 676332] [client 173.239.224.37:26585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modmove.com"] [uri "/.env"] [unique_id "aEzso9wgMc1bWLCpU0GQVQAAABE"] show less
Brute-Force
Bad Web Bot
Web App Attack