🇺🇸
MogBox
2024-04-21 14:18:04
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 45.32.236.196 (NL/The Netherlands/45.32.236.196 ...
show more
(mod_security) mod_security (id:210492) triggered by 45.32.236.196 (NL/The Netherlands/45.32.236.196.vultrusercontent.com): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Apr 21 10:17:59.483063 2024] [security2:error] [pid 66139:tid 47078904604416] [client 45.32.236.196:55987] [client 45.32.236.196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67.225.186.60"] [uri "/.env"] [unique_id "ZiUgF7FhO5-IvFkz8sHdQQAAAFU"]
show less
Hacking
🇳🇱
BlueWire Hosting
2024-04-21 14:10:02
(2 years ago)
Scanning for Laravel vulnerabilities
Web App Attack
🇪🇸
el-brujo
2024-04-21 11:58:19
(2 years ago)
21/Apr/2024:13:58:18.690415 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
21/Apr/2024:13:58:18.690415 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 45.32.236.196] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "91.126.217.153"] [uri "/.env"] [unique_id "ZiT_Ws0D9kY3g5jvgDrqbgAAA2w"]
...
show less
Hacking
Web App Attack
🇩🇪
psauxit
2024-04-21 11:29:34
(2 years ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇩🇪
hfbusiness.de
2024-04-21 11:22:00
(2 years ago)
45.32.236.196 - - [21/Apr/2024:13:22:00 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Linux; ...
show more
45.32.236.196 - - [21/Apr/2024:13:22:00 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇲🇾
Rizzy
2024-04-21 10:17:49
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
Burayot
2024-04-21 00:41:32
(2 years ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.32.236.196 (NL/The Netherlands/45 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.32.236.196 (NL/The Netherlands/45.32.236.196.vultrusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇪🇸
10dencehispahard SL
2024-04-20 22:00:14
(2 years ago)
Suspicious activity detected by Modsecurity [Suspicious IP found on 43 endpoints 138 hits. Reinciden ...
show more
Suspicious activity detected by Modsecurity [Suspicious IP found on 43 endpoints 138 hits. Reincident by 0. Rules:]
show less
Web App Attack
🇳🇱
Savvii
2024-04-20 21:20:40
(2 years ago)
20 attempts against mh-misbehave-ban on star
Brute-Force
Bad Web Bot
Web App Attack
2024-04-20 18:11:49
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host