🇩🇪
mccoder.py
2023-12-19 08:05:27
(2 years ago)
Rejected on AME-104
Web App Attack
🇩🇪
sdos.es
2023-12-19 02:34:51
(2 years ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack
🇩🇪
ut-addicted.com
2023-12-19 01:08:47
(2 years ago)
\[Tue Dec 19 02:08:46.112141 2023\] \[:error\] \[pid 5830:tid 139701589751552\] \[client 185.236.231 ...
show more
\[Tue Dec 19 02:08:46.112141 2023\] \[:error\] \[pid 5830:tid 139701589751552\] \[client 185.236.231.100:55801\] \[client 185.236.231.100\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZYDtHvB@zdBjra5sStdUKgAAAEA"\]
show less
Brute-Force
Web App Attack
2023-12-19 00:37:58
(2 years ago)
Invalid POST request
Hacking
2023-12-18 20:11:39
(2 years ago)
DNS Compromise
DDoS Attack
🇩🇪
psauxit
2023-12-18 16:33:21
(2 years ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇪🇸
Julian Perez
2023-12-18 16:12:40
(2 years ago)
AndroxGh0st.Malware
Port Scan
Hacking
🇨🇦
legitssl
2023-12-18 13:53:22
(2 years ago)
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ...
show more
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1"
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1"
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1"
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1"
185.236.231.100 - - [18/Dec/2023:08:53:21 -0500] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 302 145 "-" "python-requests/2.25.1"
...
show less
Hacking
Web App Attack
🇩🇪
SnowBerryZ
2023-12-18 13:26:00
(2 years ago)
Rejected on AME-106
Web App Attack
🇩🇪
Mr-Money
2023-12-18 11:53:40
(2 years ago)
185.236.231.100 - - [18/Dec/2023:12:53:39 +0100] "GET /.env HTTP/1.1" 404 461 "-" "Mozilla/5.0 (Linu ...
show more
185.236.231.100 - - [18/Dec/2023:12:53:39 +0100] "GET /.env HTTP/1.1" 404 461 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
psauxit
2023-12-15 20:09:04
(2 years ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇩🇪
niceshops.com
2023-12-15 18:55:01
(2 years ago)
Web Attack ([15/Dec/2023:19:54:59.619] GET /.env)
Web App Attack
🇩🇪
ut-addicted.com
2023-12-15 10:22:29
(2 years ago)
\[Fri Dec 15 11:22:27.525425 2023\] \[:error\] \[pid 24620:tid 139708872279808\] \[client 185.236.23 ...
show more
\[Fri Dec 15 11:22:27.525425 2023\] \[:error\] \[pid 24620:tid 139708872279808\] \[client 185.236.231.100:65437\] \[client 185.236.231.100\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "ZXwo4wFkhqhIOon-OiX4pAAAAMA"\]
show less
Brute-Force
Web App Attack
🇫🇷
Bedios GmbH
2023-12-14 22:57:24
(2 years ago)
Login credentials theft attempt
Hacking
🇩🇪
sdos.es
2023-12-13 21:32:29
(2 years ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack