🇺🇸
antlac1
2025-01-09 20:38:27
(1 year ago)
crowdsecurity/http-crawl-non_statics
Brute-Force
Web App Attack
🇨🇭
zynex
2024-10-27 22:29:03
(1 year ago)
URL Probing: /test2.php
Web App Attack
🇺🇸
TPI-Abuse
2024-10-15 18:37:22
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.114.37.34 (ip.50-114-37-34.atomicnetworks.co ...
show more
(mod_security) mod_security (id:210492) triggered by 50.114.37.34 (ip.50-114-37-34.atomicnetworks.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 14:37:18.776493 2024] [security2:error] [pid 2529:tid 2529] [client 50.114.37.34:51593] [client 50.114.37.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lalalana.mx"] [uri "/public/.env"] [unique_id "Zw62XmqakrX3yLDzAT8FPAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-15 18:18:39
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 50.114.37.34 (ip.50-114-37-34.atomicnetworks.co ...
show more
(mod_security) mod_security (id:210492) triggered by 50.114.37.34 (ip.50-114-37-34.atomicnetworks.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 14:18:32.188965 2024] [security2:error] [pid 21865:tid 21865] [client 50.114.37.34:65048] [client 50.114.37.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "holboxwhalesharktours.net"] [uri "/public/.env"] [unique_id "Zw6x-HWq-BcI94Y-rd7r-QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2024-09-22 19:28:31
(1 year ago)
171 requests to *.env
Brute-Force
Bad Web Bot
🇦🇺
paulshipley.com.au
2024-09-13 16:55:15
(1 year ago)
balcomberetreat.com.au:443 50.114.37.34 - - [14/Sep/2024:02:55:09 +1000] "GET /public/.env HTTP/1.1" ...
show more
balcomberetreat.com.au:443 50.114.37.34 - - [14/Sep/2024:02:55:09 +1000] "GET /public/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1"
balcomberetreat.com.au:443 50.114.37.34 - - [14/Sep/2024:02:55:09 +1000] "GET /laravel/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1"
balcomberetreat.com.au:443 50.114.37.34 - - [14/Sep/2024:02:55:10 +1000] "GET /infophp.php HTTP/1.1" 404 73010 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/122.0.6261.62 Mobile/15E148 Safari/604.1"
balcomberetreat.com.au:443 50.114.37.34 - - [14/Sep/2024:02:55:11 +1000] "GET /public/.env HTTP/1.1" 403 675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.
...
show less
Web App Attack
🇺🇸
vestibtech
2024-09-13 15:48:34
(1 year ago)
50.114.37.34 - - [13/Sep/2024:09:48:34 -0600] "GET /beta/.env HTTP/1.1" 404 6566 "-" "Mozilla/5.0 (L ...
show more
50.114.37.34 - - [13/Sep/2024:09:48:34 -0600] "GET /beta/.env HTTP/1.1" 404 6566 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack
🇬🇧
Mendip_Defender
2024-09-13 15:26:32
(1 year ago)
[13/Sep/2024:16:26:39.670789 +0100] ZuRZr29ajpOvjCubEQ_opQAAAIM 50.114.37.34 54462 188.246.206.60 70 ...
show more
[13/Sep/2024:16:26:39.670789 +0100] ZuRZr29ajpOvjCubEQ_opQAAAIM 50.114.37.34 54462 188.246.206.60 7081
[13/Sep/2024:16:26:39.729341 +0100] ZuRZr29ajpOvjCubEQ_opgAAAJE 50.114.37.34 54478 188.246.206.60 7081
...
show less
Brute-Force
2024-09-13 14:46:37
(1 year ago)
Web App Attack
🇩🇪
paissangroup
2024-09-13 12:58:16
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
FABIO EGAS
2024-09-13 11:57:06
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 50.114.37.34 (US/United States/ip.50-11 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 50.114.37.34 (US/United States/ip.50-114-37-34.atomicnetworks.co)
show less
SQL Injection
🇨🇭
teamsecure
2024-09-13 07:49:47
(1 year ago)
Banned for trying to access env
Web App Attack
2024-09-13 07:08:20
(1 year ago)
Attempted search for exploits and vulnerabilities detected by fail2ban noscript
...
Brute-Force
Web App Attack
🇳🇱
Savvii
2024-09-13 06:02:03
(1 year ago)
20 attempts against mh_ha-misbehave-ban on azuki
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2024-09-12 21:16:52
(1 year ago)
2024/09/12 22:16:48 [error] 3352#3352: *481390 access forbidden by rule, client: 50.114.37.34, serve ...
show more
2024/09/12 22:16:48 [error] 3352#3352: *481390 access forbidden by rule, client: 50.114.37.34, server: vp-arc.org, request: "GET /.env HTTP/2.0", host: "vp-arc.org"
50.114.37.34 - - [12/Sep/2024:22:16:48 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1"
2024/09/12 22:16:50 [error] 3353#3353: *481400 access forbidden by rule, client: 50.114.37.34, server: vp-arc.org, request: "GET /vendor/.env HTTP/2.0", host: "vp-arc.org"
show less
Web App Attack