2023-12-14 21:56:02
(2 years ago)
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2023-12-12 03:19:40
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 22:19:34.015814 2023] [security2:error] [pid 18372] [client 51.89.158.66:56026] [client 51.89.158.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "churchtop.com"] [uri "/.env"] [unique_id "ZXfRRkc7Ygam27bb3J9NxQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2023-12-08 09:04:37
(2 years ago)
21 attempts against mh-misbehave-ban on thyme
Brute-Force
Bad Web Bot
Web App Attack
2023-12-08 08:18:06
(2 years ago)
(mod_security) mod_security triggered on hostname [redacted] 51.89.158.66 (GB/United Kingdom/ip66.ip ...
show more
(mod_security) mod_security triggered on hostname [redacted] 51.89.158.66 (GB/United Kingdom/ip66.ip-51-89-158.eu)
show less
SQL Injection
🇺🇸
TPI-Abuse
2023-12-07 13:25:21
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 07 08:25:16.745687 2023] [security2:error] [pid 26242] [client 51.89.158.66:56198] [client 51.89.158.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "symbarenewables.com"] [uri "/.env"] [unique_id "ZXHHvPozCXBWQNNx-_BasAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-07 13:08:12
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 07 08:08:07.990386 2023] [security2:error] [pid 9927] [client 51.89.158.66:59652] [client 51.89.158.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orlando-windsor-villa.com"] [uri "/.env"] [unique_id "ZXHDt1pJ_2P7NYTCA422VwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
alancfoster
2023-12-07 12:53:55
(2 years ago)
51.89.158.66 - - [07/Dec/2023:12:53:52 +0000] "GET //wp-login.php HTTP/1.1" 404 492 "-" "-"
...
Web App Attack
🇬🇧
Swiptly
2023-12-07 12:49:35
(2 years ago)
Multiple critical ModSecurity events
...
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2023-12-07 12:43:31
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 51.89.158.66 (ip66.ip-51-89-158.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 07 07:43:26.314640 2023] [security2:error] [pid 3046:tid 46948128208640] [client 51.89.158.66:57093] [client 51.89.158.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/.env"] [unique_id "ZXG97hlZDXI2w_e4mdyLUwAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇲
Buster
2023-12-07 01:56:45
(2 years ago)
Repeated attack attempts from Perm Blocked ASN and country: GET /.env
Open Proxy
VPN IP
Hacking
Web App Attack
🇨🇭
teamsecure
2023-12-07 00:05:43
(2 years ago)
Banned for trying to access wp-login
Web App Attack
🇩🇪
eminovic.ba
2023-12-06 21:02:04
(2 years ago)
BRUTE FORCE: Excessive 404 hits
...
Hacking
Brute-Force
Web App Attack
🇨🇳
ThreatBook.io
2023-08-29 23:28:24
(3 years ago)
2023-08-29 00:18:21 //my.tod.tv:443
2023-08-29 00:36:32 //my.tod.tv:443
2023-08-29 00:45:31 //my.tod ...
show more
2023-08-29 00:18:21 //my.tod.tv:443
2023-08-29 00:36:32 //my.tod.tv:443
2023-08-29 00:45:31 //my.tod.tv:443
2023-08-29 00:46:39 //my.tod.tv:443
2023-08-29 00:26:27 //my.tod.tv:443
2023-08-29 00:27:05 //my.tod.tv:443
show less
Web App Attack