๐บ๐ธ
TPI-Abuse
2023-11-19 20:23:28
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 15:23:26.929115 2023] [security2:error] [pid 3143698] [client 3.22.234.163:34325] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hazardvillefire.org"] [uri "/.env"] [unique_id "ZVpuvjdlFv13rTOXm1DuUAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2023-11-19 19:50:33
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:50:29.660408 2023] [security2:error] [pid 8859] [client 3.22.234.163:54301] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hookedupfishing.net"] [uri "/.env"] [unique_id "ZVpnBRGcfvygJ1MzwzGNYQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2023-11-19 19:33:25
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:33:19.566576 2023] [security2:error] [pid 19762] [client 3.22.234.163:34225] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howtosellmorepizza.com"] [uri "/.env"] [unique_id "ZVpi_5hzscDfXqt0SBGEEwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2023-11-19 19:10:10
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:10:04.604083 2023] [security2:error] [pid 26536] [client 3.22.234.163:55021] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hazelwerner.com"] [uri "/.env"] [unique_id "ZVpdjI6mlOigQff1-8zwtwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
Mediashaker
2023-11-19 19:09:42
(2 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 3.22.234.163 (US/United ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 3.22.234.163 (US/United States/ec2-3-22-234-163.us-east-2.compute.amazonaws.com)
show less
Port Scan
๐ฉ๐ช
Bedios GmbH
2023-11-19 19:05:27
(2 years ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
TPI-Abuse
2023-11-19 18:53:01
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:52:54.166299 2023] [security2:error] [pid 18371:tid 47097987475200] [client 3.22.234.163:50203] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gqsi.aafm.us"] [uri "/.env"] [unique_id "ZVpZhkMcbm3z_Mfr0bGWPwAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2023-11-19 18:26:30
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 13:26:24.182878 2023] [security2:error] [pid 21573] [client 3.22.234.163:55763] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gowithevergreen.com"] [uri "/.env"] [unique_id "ZVpTUJVf-WH7TsXstZwndgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2023-11-19 18:20:06
(2 years ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
๐ฎ๐ฉ
Burayot
2023-11-19 18:13:30
(2 years ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 3.22.234.163 (US/United States/ec2-3 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 3.22.234.163 (US/United States/ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 2 in the last 3600 secs
show less
Web App Attack
๐ฌ๐ง
findlab
2023-11-19 18:10:03
(2 years ago)
Backdrop CMS module - scanning for vulnerable files
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2023-11-19 17:55:09
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.comput ...
show more
(mod_security) mod_security (id:210492) triggered by 3.22.234.163 (ec2-3-22-234-163.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 12:55:00.251931 2023] [security2:error] [pid 10420] [client 3.22.234.163:48369] [client 3.22.234.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.halotoys.com"] [uri "/.env"] [unique_id "ZVpL9HtjjdrVMW2HULSWLQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack