🇺🇸
thefoofighter
2024-12-09 02:36:31
(1 year ago)
[Mon Dec 09 02:36:31.264414 2024] [:error] [pid 4083714] [client 157.245.149.160:57854] [client 157. ...
show more
[Mon Dec 09 02:36:31.264414 2024] [:error] [pid 4083714] [client 157.245.149.160:57854] [client 157.245.149.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "Z1ZXrwSJJh7VWxVWOsfGngAAAAQ"]
[Mon Dec 09 02:36:31.272228 2024] [:error] [pid 4083502] [client 157.245.149.160:36776] [client 157.245.149.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
Bad Web Bot
Web App Attack
🇫🇷
aitenders.com
2024-12-08 22:47:52
(1 year ago)
Port probe: TCP/80
Port Scan
🇳🇱
Savvii
2024-11-30 14:59:13
(1 year ago)
20 attempts against mh-misbehave-ban on hostbilldb2
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2024-11-30 13:08:11
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 157.245.149.160 (SG/Singapore/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 157.245.149.160 (SG/Singapore/-): 1 in the last 3600 secs
show less
Web App Attack
🇩🇪
nextweb
2024-11-30 06:22:36
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 157.245.149.160 (SG/Singapore/-/Singapore/-/[AS ...
show more
(mod_security) mod_security (id:210492) triggered by 157.245.149.160 (SG/Singapore/-/Singapore/-/[AS14061 DIGITALOCEAN-ASN]): 5 in the last 3600 secs (CF_ENABLE)
show less
Brute-Force
🇩🇪
thomas_knispel
2024-11-30 03:07:15
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 157.245.149.160 (SG/Singapore/-)
SQL Injection
🇦🇺
afleventoffice.com.au
2024-11-29 22:04:32
(1 year ago)
GET /.env HTTP/1.1
Web App Attack
🇨🇱
www.afrohosting.cl
2024-11-28 02:44:51
(1 year ago)
Brute force
Brute-Force
🇫🇷
sxvn
2024-11-28 02:05:38
(1 year ago)
2024-11-28 02:05:37,569 fail2ban.actions [803]: NOTICE [webexploits] Ban 157.245.149.160
202 ...
show more
2024-11-28 02:05:37,569 fail2ban.actions [803]: NOTICE [webexploits] Ban 157.245.149.160
2024-11-28 02:05:37,745 fail2ban.actions [803]: NOTICE [nginxrepeatoffender] Ban 157.245.149.160
2024-11-28 02:05:38,020 fail2ban.actions [803]: NOTICE [nginx-4xx] Ban 157.245.149.160
...
show less
Brute-Force
🇬🇧
dwmosaics
2024-11-27 22:10:26
(1 year ago)
"GET /laravel/.env HTTP/1.1" 301 590 "-" "Mozilla/5.0 (X11; Linux x86_64) A...
Brute-Force
Web App Attack
🇺🇸
thefoofighter
2024-11-26 10:06:13
(1 year ago)
[Tue Nov 26 10:06:13.573047 2024] [:error] [pid 3870982] [client 157.245.149.160:55210] [client 157. ...
show more
[Tue Nov 26 10:06:13.573047 2024] [:error] [pid 3870982] [client 157.245.149.160:55210] [client 157.245.149.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "63.250.44.173"] [uri "/"] [unique_id "Z0WdlWQ8SUKB3QXdmtGhZwAAACE"]
[Tue Nov 26 10:06:13.589934 2024] [:error] [pid 3869657] [client 157.245.149.160:34260] [client 157.245.149.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.
...
show less
Bad Web Bot
Web App Attack
🇩🇪
MrRage
2023-04-26 07:47:20
(3 years ago)
Unauthorized Connection On Port 443 From IP Address 157.245.149.160
Port Scan
Hacking
🇩🇪
Prepaid-Host.com
2023-04-26 07:15:53
(3 years ago)
Unauthorized connection attempt detected from IP address 157.245.149.160 to port 443 (Germany, Frank ...
show more
Unauthorized connection attempt detected from IP address 157.245.149.160 to port 443 (Germany, Frankfurt Main, Prepaid-Host) [g]
show less
Brute-Force
Exploited Host
🇫🇷
Yoxt
2023-04-26 06:59:34
(3 years ago)
Unauthorized connection attempt from IP address 157.245.149.160 on Port 443
Port Scan
Hacking