🇮🇩
Burayot
2025-03-19 07:14:30
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 206.72.206.92 (US/United States/server.azagroup.com): 1 in the last 3600 secs
Web App Attack
🇩🇪
niceshops.com
2025-03-19 00:23:25
UTC ·
(1 year ago)
Web Attack (18/Mar/2025:19:33:02.162", "frontend": "frontend_disco~", "backend": "frontend_disco", "backend_server": "<NOSRV>", "time_request": 0, "time_wait": -1, "time_connect": -1, "time_response": -1, "time_active": 0, "status": 425, "bytes_read" ...
show more
Web Attack (18/Mar/2025:19:33:02.162", "frontend": "frontend_disco~", "backend": "frontend_disco", "backend_server": "<NOSRV>", "time_request": 0, "time_wait": -1, "time_connect": -1, "time_response": -1, "time_active": 0, "status": 425, "bytes_read": 7375, "termination_state": "PR--", "actconn": 94, "feconn": 93, "beconn": 0, "srv_conn": 0, "retries": 0, "srv_queue": 0, "backend_queue": 0, "capture_request": "{picantino.it|0|0||0||0|python-requests/2.25.1|1||8a4c2e1ddade0806cf189b77dbeed96c-US-19318-206.72.0.0-00-y-feca--l-x-bbacf82a-n-u-x-n-n|y-feca--l-x-x-00000000-c40cb9ee-bbacf82a-00000000-3f3a6449-n-y-1.1-u-x-x-n-n|8a4c2e1ddade0806cf189b77dbeed96c||6||1|1|1|unverified|US|19318|0|0}", "capture_response GET /.env)
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-03-18 21:24:31
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 17:24:28.888642 2025] [security2:error] [pid 18683:tid 18683] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 17:24:28.888642 2025] [security2:error] [pid 18683:tid 18683] [client 206.72.206.92:48736] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenewplantation.org"] [uri "/.env"] [unique_id "Z9nkjBVL5e8swcqdZtlktgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2025-03-18 21:22:56
UTC ·
(1 year ago)
Web vulnerability probing
Web App Attack
🇺🇸
TPI-Abuse
2025-03-18 21:05:42
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 17:05:37.738342 2025] [security2:error] [pid 22742:tid 22742] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 17:05:37.738342 2025] [security2:error] [pid 22742:tid 22742] [client 206.72.206.92:57768] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mta-sts.webmail.lexie.org"] [uri "/.env"] [unique_id "Z9ngIdlcZSw5gKBwj6MKowAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-18 19:39:52
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 15:39:43.752576 2025] [security2:error] [pid 11936:tid 11936] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 18 15:39:43.752576 2025] [security2:error] [pid 11936:tid 11936] [client 206.72.206.92:57302] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cain2012.org"] [uri "/.env"] [unique_id "Z9nL_67voOS5LtiLzB0DvAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-03-18 04:25:22
UTC ·
(1 year ago)
206.72.206.92 - - [18/Mar/2025:06:25:20 +0200] "GET /.env HTTP/1.1" 404 2865 "-" "python-requests/2.25.1"
206.72.206.92 - - [18/Mar/2025:06:25:21 +0200] "GET /public/.env HTTP/1.1" 404 2785 "-" "python-requests/2.25.1"
...
Web App Attack
2025-03-18 03:44:56
UTC ·
(1 year ago)
apache-auth
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-18 02:29:50
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 22:29:44.832176 2025] [security2:error] [pid 32150:tid 32166] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 22:29:44.832176 2025] [security2:error] [pid 32150:tid 32166] [client 206.72.206.92:48064] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingdj.info"] [uri "/.env"] [unique_id "Z9jamCV92UITh-8M9MNjJgAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 22:04:06
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 18:03:59.362602 2025] [security2:error] [pid 15081:tid 15081] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 18:03:59.362602 2025] [security2:error] [pid 15081:tid 15081] [client 206.72.206.92:49192] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "undergroundh2o.com"] [uri "/.env"] [unique_id "Z9icTwLYiqwJA5sJGd5qcAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 12:20:14
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 08:20:09.829347 2025] [security2:error] [pid 32189:tid 32189] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 08:20:09.829347 2025] [security2:error] [pid 32189:tid 32189] [client 206.72.206.92:36156] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "progresssetfree.com.stevescottcoaching.com"] [uri "/.env"] [unique_id "Z9gTeQIM3oN4DLy6UdSuEgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-03-17 08:01:44
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 206.72.206.92 (US/United States/server.azagroup.com): 2 in the last 3600 secs
Web App Attack
🇬🇧
openstrike.co.uk
2025-03-17 06:13:11
UTC ·
(1 year ago)
5 attacks on env grabbing URLs:
GET /.env.example HTTP/1.1
Hacking
🇺🇸
ipblock.com
2025-03-17 01:38:00
UTC ·
(1 year ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-16 21:56:59
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 17:56:52.196423 2025] [security2:error] [pid 21125:tid 21125] [client 206. ...
show more
(mod_security) mod_security (id:210492) triggered by 206.72.206.92 (server.azagroup.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 17:56:52.196423 2025] [security2:error] [pid 21125:tid 21125] [client 206.72.206.92:38144] [client 206.72.206.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greenquince.com"] [uri "/.env"] [unique_id "Z9dJJPKsEiZpB3-_2UPMDwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack