2024-04-22 11:17:09
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
Brute-Force
SSH
🇩🇪
hfbusiness.de
2024-04-13 15:29:40
(2 years ago)
146.70.19.106 - - [13/Apr/2024:17:29:39 +0200] "HEAD /.env HTTP/1.1" 404 140 "-" "Go-http-client/1.1 ...
show more
146.70.19.106 - - [13/Apr/2024:17:29:39 +0200] "HEAD /.env HTTP/1.1" 404 140 "-" "Go-http-client/1.1"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
octageeks.com
2024-03-31 04:10:17
(2 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
octageeks.com
2024-03-29 04:10:19
(2 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
octageeks.com
2024-03-28 04:10:13
(2 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
octageeks.com
2024-03-27 04:10:07
(2 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2024-03-25 06:27:34
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 02:27:29.409523 2024] [security2:error] [pid 4271] [client 146.70.19.106:24303] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyoneal.com"] [uri "/.env"] [unique_id "ZgEZUQMoG6XloFEnaH4gcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rdpguard.com
2024-03-25 06:14:18
(2 years ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2024-03-25 06:00:01
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 01:59:53.135161 2024] [security2:error] [pid 16782] [client 146.70.19.106:26899] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gkwire.com"] [uri "/.env"] [unique_id "ZgES2ckurzOkkas68TZxhQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-25 05:24:28
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 01:24:22.848272 2024] [security2:error] [pid 14764] [client 146.70.19.106:33487] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grdigitaldesigns.com"] [uri "/.env"] [unique_id "ZgEKhjp36J9XImCwVRsBtAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-25 04:29:46
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 00:29:40.587815 2024] [security2:error] [pid 18460] [client 146.70.19.106:47951] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grimone.com"] [uri "/.env"] [unique_id "ZgD9tJLD5sgIW_QL1TWyGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-03-25 04:15:48
(2 years ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-03-25 04:13:19
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 00:13:14.056970 2024] [security2:error] [pid 3686] [client 146.70.19.106:28469] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gangnagel.com"] [uri "/.env"] [unique_id "ZgD52lWWQmZR8ph6yBrWgAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2024-03-25 04:11:12
(2 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2024-03-25 03:57:31
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 24 23:57:23.011082 2024] [security2:error] [pid 28450] [client 146.70.19.106:37221] [client 146.70.19.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gacstoday.com"] [uri "/.env"] [unique_id "ZgD2I38lqMhwQ1G74vB8iAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack