🇺🇸
TPI-Abuse
2025-12-13 14:36:04
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 09:36:00.396001 2025] [security2:error] [pid 116 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 09:36:00.396001 2025] [security2:error] [pid 11640:tid 11653] [client 44.249.8.29:50942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wwjnd.com.thebiglies.com"] [uri "/.env"] [unique_id "aT150JLY2C9rmlx7OLMJ1gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 14:03:56
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 09:03:48.196318 2025] [security2:error] [pid 223 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 09:03:48.196318 2025] [security2:error] [pid 22317:tid 22317] [client 44.249.8.29:44114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wholesale.fydelityco.com"] [uri "/.env"] [unique_id "aT1yRIabokLcPmnPsA-3VwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
IROK
2025-12-13 13:56:52
UTC ·
(11 months ago)
Firewall Blocked - Unauthorized Port Scanning
...
Port Scan
🇳🇱
Mangelot Hosting
2025-12-13 13:45:02
UTC ·
(11 months ago)
(modsecurity) srv103 ModSecurity 44.249.8.29 (US/United States/ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 12:42:25
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:42:20.514607 2025] [security2:error] [pid 537 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:42:20.514607 2025] [security2:error] [pid 5372:tid 5372] [client 44.249.8.29:40344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vandiprojects.com.clearmarginpartners.com"] [uri "/.env.prod"] [unique_id "aT1fLK1M10jmkhRJeAm-lgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 12:16:28
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:16:20.358054 2025] [security2:error] [pid 835 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 07:16:20.358054 2025] [security2:error] [pid 8354:tid 8354] [client 44.249.8.29:43074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.uniquetreasuresshops.com.uniquetreasuresshoppes.com"] [uri "/.git/config"] [unique_id "aT1ZFE2GnPTXi3BxipSHiQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 11:35:47
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:35:42.739190 2025] [security2:error] [pid 152 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 06:35:42.739190 2025] [security2:error] [pid 15226:tid 15226] [client 44.249.8.29:57554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.track.mailperform.com"] [uri "/.env"] [unique_id "aT1PjuMHcswqkIMX9zkR2AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
G4zabus3r
2025-12-13 10:18:58
UTC ·
(11 months ago)
(mod_security) mod_security triggered on hostname [redacted] 44.249.8.29 (US/United States/ec2-44-249-8-29.us-west-2.compute.amazonaws.com)
SQL Injection
🇺🇸
mnsf
2025-12-13 10:05:15
UTC ·
(11 months ago)
Too many Status 40X (21)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 09:22:55
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 04:22:49.735531 2025] [security2:error] [pid 288 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 04:22:49.735531 2025] [security2:error] [pid 28817:tid 28817] [client 44.249.8.29:34758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stats.179vfs.com"] [uri "/.env"] [unique_id "aT0waffzv3W9d8-EtqrRrgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
konseptit
2025-12-13 09:22:52
UTC ·
(11 months ago)
(mod_security) mod_security triggered on hostname [redacted] 44.249.8.29 (US/United States/ec2-44-249-8-29.us-west-2.compute.amazonaws.com)
SQL Injection
🇺🇸
thefoofighter
2025-12-13 09:00:20
UTC ·
(11 months ago)
[Sat Dec 13 09:00:16.896423 2025] [:error] [pid 488158] [client 44.249.8.29:48952] [client 44.249.8.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949 ...
show more
[Sat Dec 13 09:00:16.896423 2025] [:error] [pid 488158] [client 44.249.8.29:48952] [client 44.249.8.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.squixl.com"] [uri "/.env"] [unique_id "aT0rIPlfvHR5thvb18P9EgAAAAI"]
[Sat Dec 13 09:00:17.947911 2025] [:error] [pid 488158] [client 44.249.8.29:48952] [client 44.249.8.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 7)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "app
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 08:14:11
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 03:14:04.044738 2025] [security2:error] [pid 206 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 03:14:04.044738 2025] [security2:error] [pid 20672:tid 20672] [client 44.249.8.29:43502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.simplifiedbookkeepingsolution.com.mariottimedia.com"] [uri "/.env"] [unique_id "aT0gTKckj-uJVT2qd1-gEwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 07:18:46
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 02:18:43.274901 2025] [security2:error] [pid 220 ...
show more
(mod_security) mod_security (id:210492) triggered by 44.249.8.29 (ec2-44-249-8-29.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 02:18:43.274901 2025] [security2:error] [pid 22096:tid 22096] [client 44.249.8.29:60064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scubadivingindustrymagazine.williamcline.com"] [uri "/.env"] [unique_id "aT0TU9jO6F4AtiqyR-Mj-gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-12-13 06:56:11
UTC ·
(11 months ago)
Multiple WAF Violations
Web App Attack