2024-05-06 19:27:56
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇩🇪
ISPLtd
2024-03-28 02:24:59
(2 years ago)
Mar 27 23:24:55 SRC=45.134.224.70 PROTO=TCP SPT=61910 DPT=22556 SYN
Mar 27 23:24:56 SRC=45.134.224.7 ...
show more
Mar 27 23:24:55 SRC=45.134.224.70 PROTO=TCP SPT=61910 DPT=22556 SYN
Mar 27 23:24:56 SRC=45.134.224.70 PROTO=TCP SPT=61910 DPT=22556 SYN
Mar 27 23:24:58 SRC=45.134.224.70 PROTO=TCP SPT=61910 DPT=22556 WIND
...
show less
Port Scan
🇺🇸
TPI-Abuse
2024-01-12 10:48:15
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 12 05:48:11.396861 2024] [security2:error] [pid 2544] [client 45.134.224.70:61156] [client 45.134.224.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.wave94.com"] [uri "/.env"] [unique_id "ZaEY6ww2gkEYPhvafa00UwAAAAQ"], referer: https://test.wave94.com:443/.env
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇷
IgorS.zg.hr
2024-01-12 04:47:50
(2 years ago)
Web application attack detected by fail2ban
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-01-12 03:37:48
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 11 22:37:45.034033 2024] [security2:error] [pid 8119] [client 45.134.224.70:35876] [client 45.134.224.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.smog-test-coupons.smogsandiego.com"] [uri "/.git/config"] [unique_id "ZaC0CQsYk9Rpr-gXmD041QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
clapper
2024-01-12 01:49:54
(2 years ago)
(mod_security) mod_security (id:949110) triggered by 45.134.224.70 (US/United States/-): 5 in the la ...
show more
(mod_security) mod_security (id:949110) triggered by 45.134.224.70 (US/United States/-): 5 in the last 3600 secs; ID: rub
show less
Brute-Force
Bad Web Bot
🇦🇺
ozisp.com.au
2024-01-12 00:22:46
(2 years ago)
US_PacketHub S.A._<33>1705018963 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound ...
show more
US_PacketHub S.A._<33>1705018963 [1:2031502:4] ET INFO Request to Hidden Environment File - Inbound [Classification: Misc activity] [Priority: 3] {TCP} 45.134.224.70:45280
show less
Hacking
🇺🇸
TPI-Abuse
2024-01-11 07:41:49
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 11 02:41:41.847099 2024] [security2:error] [pid 16926] [client 45.134.224.70:35128] [client 45.134.224.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.jatglobalsolution.com"] [uri "/.git/config"] [unique_id "ZZ-btdl6dSduz1l3iO4-qgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2024-01-10 15:10:04
(2 years ago)
Scanning for Laravel vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2024-01-10 04:56:56
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.224.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 23:56:50.708758 2024] [security2:error] [pid 32550] [client 45.134.224.70:19256] [client 45.134.224.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owncloud.dnchosting.com"] [uri "/.git/config"] [unique_id "ZZ4jkkt70noqwou7mOPnLgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-01-09 23:17:39
(2 years ago)
Configuration snooping (/.env):
45.134.224.70 - - [09/Jan/2024:23:17:39 +0000] "GET /.env HTTP/1.1" ...
show more
Configuration snooping (/.env):
45.134.224.70 - - [09/Jan/2024:23:17:39 +0000] "GET /.env HTTP/1.1" 200 234 "https://[sub domain]:443/.env" "Go-http-client/1.1"
show less
Hacking
Web App Attack
🇩🇪
Bedios GmbH
2024-01-09 02:07:24
(2 years ago)
Login credentials theft attempt
Hacking