🇺🇸
TPI-Abuse
2025-11-28 11:33:28
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 06:33:23.374027 2025] [security2:error] [pid 2860:tid 2860] [client 3.8.134.74:42990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitetaildetailing.com"] [uri "/.env"] [unique_id "aSmIgxne0fMS4tQl9qS7qgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 11:16:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 06:16:27.918464 2025] [security2:error] [pid 2676301:tid 2676468] [client 3.8.134.74:56818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitecrosslibrary.aafm.us"] [uri "/.env.local"] [unique_id "aSmEi-nYGjeFD36XfGlrPwAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 09:52:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 04:52:12.080330 2025] [security2:error] [pid 18649:tid 18649] [client 3.8.134.74:46748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wilagator.weyoungrenovations.com"] [uri "/.env.local"] [unique_id "aSlwzMiwu50UQdNLOm7sWwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-28 02:35:01
(6 months ago)
[Fri Nov 28 03:34:59.265891 2025] [authz_core:error] [pid 56942:tid 132251228563136] [client 3.8.134 ...
show more
[Fri Nov 28 03:34:59.265891 2025] [authz_core:error] [pid 56942:tid 132251228563136] [client 3.8.134.74:43024] AH01630: client denied by server configuration: /var/customers/webs/eicke/wir-machen-internetseiten.de/.env.local [Fri Nov 28 03:34:59.266516 2025] [authz_core:error] [pid 56990:tid 132252149286592] [client 3.8.134.74:43026] AH01630: client denied by server configuration: /var/customers/webs/eicke/wir-machen-internetseiten.de/.env.remote [Fri Nov 28 03:34:59.266694 2025] [authz_core:error] [pid 56990:tid 132251413104320] [client 3.8.134.74:43030] AH01630: client denied by server configuration: /var/customers/webs/eicke/wir-machen-internetseiten.de/.env.production
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-11-27 23:05:41
(6 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇫🇷
masterguru
2025-11-27 19:17:26
(6 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-27 19:16:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.am ...
show more
(mod_security) mod_security (id:210492) triggered by 3.8.134.74 (ec2-3-8-134-74.eu-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:16:16.264882 2025] [security2:error] [pid 27756:tid 27756] [client 3.8.134.74:57262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.paulschuster.com"] [uri "/.git/config"] [unique_id "aSijgN5ppzldPX66lCE0HwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
nekopavel
2025-11-27 19:10:50
(6 months ago)
3.8.134.74 - - [27/Nov/2025:20:10:47 +0100]"GET /vendor/.env HTTP/1.1" 404 118"-" mail.pavel.gg "pyt ...
show more
3.8.134.74 - - [27/Nov/2025:20:10:47 +0100]"GET /vendor/.env HTTP/1.1" 404 118"-" mail.pavel.gg "python-httpx/0.22.0""0.001" "0.000""City of London" "GB"
3.8.134.74 - - [27/Nov/2025:20:10:47 +0100]"GET /lab/.env HTTP/1.1" 404 118"-" mail.pavel.gg "python-httpx/0.22.0""0.001" "0.000""City of London" "GB"
3.8.134.74 - - [27/Nov/2025:20:10:47 +0100]"GET /.env.production HTTP/1.1" 404 118"-" mail.pavel.gg "python-httpx/0.22.0""0.000" "0.000""City of London" "GB"
...
show less
Hacking
Bad Web Bot
Web App Attack
2025-11-27 19:07:55
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
Aetherweb Ark
2025-11-27 17:29:47
(6 months ago)
(mod_security) mod_security (id:949110) triggered by 3.8.134.74 (GB/United Kingdom/ec2-3-8-134-74.eu ...
show more
(mod_security) mod_security (id:949110) triggered by 3.8.134.74 (GB/United Kingdom/ec2-3-8-134-74.eu-west-2.compute.amazonaws.com): N in the last X secs
show less
Web App Attack