2025-02-22 21:27:23
(1 year ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2023-12-25 18:50:16
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 13:50:10.373857 2023] [security2:error] [pid 20379] [client 37.120.237.14:45487] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.175"] [uri "/.env"] [unique_id "ZYnO4iY8Ei2OBcaCrtNEGwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-25 17:10:35
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 12:10:31.598205 2023] [security2:error] [pid 31575] [client 37.120.237.14:25271] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.249"] [uri "/.env"] [unique_id "ZYm3hw1BiDJxIWxM40-Y_AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-12-25 16:44:28
(2 years ago)
$f2bV_matches
Brute-Force
🇩🇪
0x44
2023-12-25 16:33:29
(2 years ago)
37.120.237.14 [25/Dec/2023 Spam host detected, probing for vulnerabilities]
...
Web Spam
Exploited Host
Web App Attack
2023-12-25 16:08:46
(2 years ago)
CMS/WebApp Exploit attempt
Web App Attack
🇺🇸
TPI-Abuse
2023-12-25 15:23:30
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 25 10:23:26.438648 2023] [security2:error] [pid 27021] [client 37.120.237.14:54879] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.27"] [uri "/.env"] [unique_id "ZYmebmfxcmzZ-VKuOsb2QAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-12-25 15:20:03
(2 years ago)
Automatic report - Vulnerability scan
/.env
Web App Attack
🇨🇦
swrlly
2023-12-25 14:29:00
(2 years ago)
attempted directly connecting to webserver using origin ip
Web App Attack
🇦🇺
Ross Wheatley
2023-12-25 11:42:43
(2 years ago)
HEAD /.env HTTP/1.1 404 140 - Go-http-client/1.1
Brute-Force
Web App Attack
🇳🇱
kumiko
2023-12-25 09:28:35
(2 years ago)
[2023-12-25 09:28:34] Probing for dotfiles
"HEAD /.env HTTP/1.1" 403
Bad Web Bot
Web App Attack
🇮🇹
LTM
2023-12-25 07:20:01
(2 years ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2023-12-25 04:47:07
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 23:47:04.174996 2023] [security2:error] [pid 3022] [client 37.120.237.14:57671] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.22"] [uri "/.env"] [unique_id "ZYkJSMnHi8_TSkVlxA9hPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-25 04:08:05
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 23:08:01.554031 2023] [security2:error] [pid 20487] [client 37.120.237.14:44571] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.220"] [uri "/.env"] [unique_id "ZYkAIUzc0XpXObIi5_Ty1QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-25 02:18:00
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 37.120.237.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 21:17:56.356632 2023] [security2:error] [pid 9946] [client 37.120.237.14:34203] [client 37.120.237.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.211"] [uri "/.env"] [unique_id "ZYjmVE7N12g0eZ6V4T8k6AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack