Anonymous
2024-08-30 11:33:02
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2024-08-30 10:24:17
(2 years ago)
45.148.10.145 - - [30/Aug/2024:13:24:15 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; ...
show more
45.148.10.145 - - [30/Aug/2024:13:24:15 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-30 02:23:57
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 22:23:52.235786 2024] [security2:error] [pid 4127:tid 4127] [client 45.148.10.145:53305] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidocchino.com"] [uri "/.env"] [unique_id "ZtEtOMDtVXcCYfRhDMrlZwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-30 02:01:28
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 22:01:25.179211 2024] [security2:error] [pid 30417:tid 30417] [client 45.148.10.145:58171] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rimworld.com"] [uri "/.env"] [unique_id "ZtEn9WMMiDOHBJLS1AM3ygAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ช
Jim Keir
2024-08-29 19:34:25
(2 years ago)
2024-08-29 19:34:24 45.148.10.145 File scanning, blocking 45.148.10.145 for 5 minutes
Web App Attack
Anonymous
2024-08-29 13:57:02
(2 years ago)
Domain : hexagono.pt
Rule : config
2024-08-29 13:55:59 38.242.219.191 GET /.env - 80 - 45.148.10.145 ...
show more
Domain : hexagono.pt
Rule : config
2024-08-29 13:55:59 38.242.219.191 GET /.env - 80 - 45.148.10.145 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - www.hexagono.pt 404 0 2 1436 234 1933 - -
show less
Hacking
SQL Injection
๐บ๐ฆ
URAN Publishing Service
2024-08-29 11:37:20
(2 years ago)
45.148.10.145 - - [29/Aug/2024:14:37:18 +0300] "GET //.env HTTP/1.1" 404 274 "-" "Mozilla/5.0 (X11; ...
show more
45.148.10.145 - - [29/Aug/2024:14:37:18 +0300] "GET //.env HTTP/1.1" 404 274 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
Anonymous
2024-08-29 10:46:01
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2024-08-28 23:15:58
(2 years ago)
45.148.10.145 - - [29/Aug/2024:02:15:57 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; ...
show more
45.148.10.145 - - [29/Aug/2024:02:15:57 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-28 19:27:39
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 15:27:33.898898 2024] [security2:error] [pid 27776:tid 27776] [client 45.148.10.145:64499] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proprocessor.com"] [uri "/.env"] [unique_id "Zs96JaSQMo76lNWsOwDEtgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-28 19:09:54
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 15:09:45.715876 2024] [security2:error] [pid 18737:tid 18737] [client 45.148.10.145:54558] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fitflex.com"] [uri "/.env"] [unique_id "Zs91-VcVNO-opritYSZDjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-28 17:55:26
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 13:55:20.534088 2024] [security2:error] [pid 226338:tid 226353] [client 45.148.10.145:51256] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.viasatsales.com"] [uri "/.env"] [unique_id "Zs9kiC3viZKw1TJzubrZJQAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-28 15:49:51
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 11:49:44.468728 2024] [security2:error] [pid 21583:tid 21583] [client 45.148.10.145:51664] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goseethenurse.com"] [uri "/.env"] [unique_id "Zs9HGEDwOb1q1nahEsdkYwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-08-28 15:32:39
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.148.10.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 11:32:34.988389 2024] [security2:error] [pid 22515:tid 22515] [client 45.148.10.145:60976] [client 45.148.10.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newdirectionsinmusic.com"] [uri "/.env"] [unique_id "Zs9DEp4LBswQCxrsjeDshQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2024-08-28 14:29:46
(2 years ago)
45.148.10.145 - - [28/Aug/2024:17:29:45 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; ...
show more
45.148.10.145 - - [28/Aug/2024:17:29:45 +0300] "GET //.env HTTP/1.1" 404 276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack