🇺🇸
TPI-Abuse
2024-01-12 13:51:26
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 12 08:51:23.681215 2024] [security2:error] [pid 6164] [client 2a01:4f8:c012:85a1::1:34220] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aldonchem.com"] [uri "/.env"] [unique_id "ZaFD23aStNf4xC3oJSPKxAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2024-01-11 06:12:20
(2 years ago)
2 attacks on password grabbing URLs:
GET /.aws/credentials HTTP/1.1
Hacking
🇩🇪
ps-center
2024-01-03 01:32:03
(2 years ago)
C1: Web Attack HEAD /wp-content/plugins/backup-backup/includes/restore-batching.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇫🇷
LOGiST
2024-01-03 01:07:40
(2 years ago)
Bot attack detected : webscan vulnerability
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
Bot attack detected : webscan vulnerability
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
show less
Bad Web Bot
🇩🇪
Ba-Yu
2024-01-01 23:21:56
(2 years ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 14:40:35
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 09:40:30.369123 2023] [security2:error] [pid 1810] [client 2a01:4f8:c012:85a1::1:51810] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stsis.me"] [uri "/.env"] [unique_id "ZZF9XiGbXij3NXMKJSvg9gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 14:17:13
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 09:17:07.656311 2023] [security2:error] [pid 29728] [client 2a01:4f8:c012:85a1::1:52216] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sabri.es"] [uri "/.env"] [unique_id "ZZF3402Vs5hupboX42-LYAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 13:44:39
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 08:44:35.547162 2023] [security2:error] [pid 11776] [client 2a01:4f8:c012:85a1::1:58798] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "faw.us"] [uri "/.env"] [unique_id "ZZFwQwGRCiVMCFhYTCkijQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 13:29:32
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 08:29:29.701640 2023] [security2:error] [pid 11204] [client 2a01:4f8:c012:85a1::1:34142] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "africa.systems"] [uri "/.env"] [unique_id "ZZFsufrOwsMrB5COyn5wfwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 09:02:42
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 04:02:36.800689 2023] [security2:error] [pid 4638] [client 2a01:4f8:c012:85a1::1:40168] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "me.ahijado.org"] [uri "/.env"] [unique_id "ZZEuLBDzflYny__tW4mv3AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 08:39:24
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 03:39:16.286199 2023] [security2:error] [pid 2038:tid 47203444082432] [client 2a01:4f8:c012:85a1::1:58996] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agqo.org"] [uri "/.env"] [unique_id "ZZEotEFllyxOOZTkASBWJwAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 07:31:56
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 02:31:50.294025 2023] [security2:error] [pid 4213] [client 2a01:4f8:c012:85a1::1:43598] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "posteios.ichi51e.net"] [uri "/.env"] [unique_id "ZZEY5hkKhmSc2CbMFi4wkAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 07:00:33
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 02:00:27.411841 2023] [security2:error] [pid 7163] [client 2a01:4f8:c012:85a1::1:54146] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leah.byles.net"] [uri "/.env"] [unique_id "ZZERi8WaHfMxqjDB_8d9mgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
sid3windr
2023-12-31 06:07:01
(2 years ago)
GET /.env (Tarpitted for 6s, wasted 480B)
Web App Attack
🇺🇸
TPI-Abuse
2023-12-31 05:45:54
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a01:4f8:c012:85a1::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 31 00:45:46.868767 2023] [security2:error] [pid 18691] [client 2a01:4f8:c012:85a1::1:57356] [client 2a01:4f8:c012:85a1::1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jobs.evolute.io"] [uri "/.env"] [unique_id "ZZEAChC7jUcWyNow5U8YQAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack