TPI-Abuse
2025-05-21 15:05:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 11:05:50.812136 2025] [security2:error] [pid 3459507:tid 3459507] [client 2001:861:324d:5df0:6195:605f:32ff:156b:55969] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "majersigns.com"] [uri "/.env"] [unique_id "aC3rzgvw3sUDys6rwbywEgAAAAo"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 14:43:32
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 10:43:25.237055 2025] [security2:error] [pid 740997:tid 740997] [client 2001:861:324d:5df0:6195:605f:32ff:156b:65248] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "now-app.space"] [uri "/.env"] [unique_id "aC3mjcXJAOZJp_sHXV8tkQAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 14:19:37
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 10:19:31.980988 2025] [security2:error] [pid 1807935:tid 1807935] [client 2001:861:324d:5df0:6195:605f:32ff:156b:57394] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lcoor.org"] [uri "/.env"] [unique_id "aC3g8_Ra6JJ8xZ2Lsd0arwAAAAg"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 12:00:27
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 08:00:23.326818 2025] [security2:error] [pid 1764755:tid 1764755] [client 2001:861:324d:5df0:6195:605f:32ff:156b:49675] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisrest.com"] [uri "/.env"] [unique_id "aC3AV0QngI_zHwm4pMAYJwAAAAg"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 11:40:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 07:40:41.524549 2025] [security2:error] [pid 2333901:tid 2333901] [client 2001:861:324d:5df0:6195:605f:32ff:156b:56845] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geofreightint.com"] [uri "/.env"] [unique_id "aC27uVHTgiy-V7-bronu8AAAAAQ"] show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-05-21 10:15:16
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 2001:861:324d:5df0:6195:605f:32ff:156b ... show more (mod_security) mod_security triggered on hostname [redacted] 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown) show less
SQL Injection
TPI-Abuse
2025-05-21 10:04:17
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 06:04:11.695011 2025] [security2:error] [pid 3352327:tid 3352327] [client 2001:861:324d:5df0:6195:605f:32ff:156b:59990] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aaronnosan.com"] [uri "/.env"] [unique_id "aC2lG_OYk_V4nI6X6h-2aAAAAAA"] show less
Brute-Force
Bad Web Bot
Web App Attack
strefapi_com
2025-05-21 09:37:47
(3 weeks ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
TPI-Abuse
2025-05-21 09:20:57
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 05:20:52.389284 2025] [security2:error] [pid 2154532:tid 2154532] [client 2001:861:324d:5df0:6195:605f:32ff:156b:49676] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.recetabook.com.creartest.com"] [uri "/.env"] [unique_id "aC2a9PyVXDKG6yqQftMEkAAAABE"] show less
Brute-Force
Bad Web Bot
Web App Attack
ghostwarriors
2025-05-21 09:20:09
(3 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 09:03:09
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 05:03:05.703932 2025] [security2:error] [pid 131637:tid 131637] [client 2001:861:324d:5df0:6195:605f:32ff:156b:57803] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.creativeinteriors.jimwilsongallery.com"] [uri "/.env"] [unique_id "aC2WyQWbQlKIXgJgPP5AvQAAAAQ"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 08:35:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 04:35:30.453283 2025] [security2:error] [pid 1170468:tid 1170595] [client 2001:861:324d:5df0:6195:605f:32ff:156b:52126] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.faceliftnewyork.com.aafm.us"] [uri "/.env"] [unique_id "aC2QUnWBtn9RBMKMx-OGPwAAAEU"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 07:54:58
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 03:54:54.518023 2025] [security2:error] [pid 1128931:tid 1128931] [client 2001:861:324d:5df0:6195:605f:32ff:156b:63256] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.visitcampbellford.modeltdr.com"] [uri "/.env"] [unique_id "aC2GzuRmJ7OyoE_2xqURHwAAAAE"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-21 06:52:13
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 21 02:52:08.169519 2025] [security2:error] [pid 1706380:tid 1706380] [client 2001:861:324d:5df0:6195:605f:32ff:156b:49817] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nighthawklabs.com"] [uri "/.env"] [unique_id "aC14GIYLh1igEhb-Rrd6TAAAAAo"] show less
Brute-Force
Bad Web Bot
Web App Attack
TPI-Abuse
2025-05-20 15:27:45
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown ... show more (mod_security) mod_security (id:210492) triggered by 2001:861:324d:5df0:6195:605f:32ff:156b (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 20 11:27:37.147014 2025] [security2:error] [pid 88230:tid 88230] [client 2001:861:324d:5df0:6195:605f:32ff:156b:65061] [client 2001:861:324d:5df0:6195:605f:32ff:156b] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taamafshan.com"] [uri "/.env"] [unique_id "aCyfaTqnFGMCD4W9Oqz_8AAAAAg"] show less
Brute-Force
Bad Web Bot
Web App Attack