🇫🇷
172.71.232.42
20 Mar 2025
[20/Mar/2025:06:24:09.500968 0000] Z9u0iVF4KuJ9JVqGs3f6-wAAABg 172.71.232.42 55498 127.0.0.1 7081
X ...
show more
[20/Mar/2025:06:24:09.500968 0000] Z9u0iVF4KuJ9JVqGs3f6-wAAABg 172.71.232.42 55498 127.0.0.1 7081
X-Real-IP: 172.71.232.42
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.232.42] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/modsecurity.d/rules/comodo_free/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lowendtalk.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lowendtalk.co"] [uri "/wp-json/wp/v2/users"] [unique_id "Z9u0iVF4KuJ9JVqGs3f6-wAAABg"]
show less
Web App Attack
🇫🇷
141.101.95.111
20 Mar 2025
[20/Mar/2025:06:22:33.949496 0000] Z9u0KQ_Wd0H309v-RDmdrAAAAFg 141.101.95.111 55630 127.0.0.1 7081
...
show more
[20/Mar/2025:06:22:33.949496 0000] Z9u0KQ_Wd0H309v-RDmdrAAAAFg 141.101.95.111 55630 127.0.0.1 7081
X-Real-IP: 141.101.95.111
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.95.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/.gitignore"] [unique_id "Z9u0KQ_Wd0H309v-RDmdrAAAAFg"]
show less
Web App Attack
🇫🇷
172.68.151.55
20 Mar 2025
[20/Mar/2025:06:22:03.313657 0000] Z9u0C1F4KuJ9JVqGs3f60gAAABA 172.68.151.55 48278 127.0.0.1 7081
X ...
show more
[20/Mar/2025:06:22:03.313657 0000] Z9u0C1F4KuJ9JVqGs3f60gAAABA 172.68.151.55 48278 127.0.0.1 7081
X-Real-IP: 172.68.151.55
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/app/config/.env"] [unique_id "Z9u0C1F4KuJ9JVqGs3f60gAAABA"]
show less
Web App Attack
🇫🇷
172.71.126.139
20 Mar 2025
[20/Mar/2025:06:21:30.122710 0000] Z9uz6lF4KuJ9JVqGs3f6wQAAAA4 172.71.126.139 44152 127.0.0.1 7081
...
show more
[20/Mar/2025:06:21:30.122710 0000] Z9uz6lF4KuJ9JVqGs3f6wQAAAA4 172.71.126.139 44152 127.0.0.1 7081
X-Real-IP: 172.71.126.139
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.126.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/settings/.env"] [unique_id "Z9uz6lF4KuJ9JVqGs3f6wQAAAA4"]
show less
Web App Attack
🇫🇷
172.71.119.69
19 Mar 2025
[19/Mar/2025:10:50:42.056172 0000] Z9qhgnKs57x9kGLMkcP0egAAAFc 172.71.119.69 33692 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:50:42.056172 0000] Z9qhgnKs57x9kGLMkcP0egAAAFc 172.71.119.69 33692 127.0.0.1 7081
X-Real-IP: 172.71.119.69
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.119.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/"] [unique_id "Z9qhgnKs57x9kGLMkcP0egAAAFc"]
show less
Web App Attack
🇫🇷
172.71.232.93
19 Mar 2025
[19/Mar/2025:10:51:58.844857 0000] Z9qhznKs57x9kGLMkcP0hQAAAEQ 172.71.232.93 38996 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:51:58.844857 0000] Z9qhznKs57x9kGLMkcP0hQAAAEQ 172.71.232.93 38996 127.0.0.1 7081
X-Real-IP: 172.71.232.93
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.232.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/"] [unique_id "Z9qhznKs57x9kGLMkcP0hQAAAEQ"]
show less
Web App Attack
🇫🇷
172.68.151.2
19 Mar 2025
[19/Mar/2025:10:49:23.589677 0000] Z9qhM3Ks57x9kGLMkcP0bwAAAEc 172.68.151.2 35528 127.0.0.1 7081
X- ...
show more
[19/Mar/2025:10:49:23.589677 0000] Z9qhM3Ks57x9kGLMkcP0bwAAAEc 172.68.151.2 35528 127.0.0.1 7081
X-Real-IP: 172.68.151.2
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.2] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||lowendtalk.co|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?uri=/etc/environment"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/"] [unique_id "Z9qhM3Ks57x9kGLMkcP0bwAAAEc"]
show less
Web App Attack
🇫🇷
141.101.68.88
19 Mar 2025
[19/Mar/2025:10:48:47.498215 0000] Z9qhD3Ks57x9kGLMkcP0ZgAAAFE 141.101.68.88 38700 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:48:47.498215 0000] Z9qhD3Ks57x9kGLMkcP0ZgAAAFE 141.101.68.88 38700 127.0.0.1 7081
X-Real-IP: 141.101.68.88
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.68.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/"] [unique_id "Z9qhD3Ks57x9kGLMkcP0ZgAAAFE"]
show less
Web App Attack
🇫🇷
141.101.68.89
19 Mar 2025
[19/Mar/2025:10:45:51.831203 0000] Z9qgX-UwY9aZRFZmYJA3nwAAABA 141.101.68.89 52826 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:45:51.831203 0000] Z9qgX-UwY9aZRFZmYJA3nwAAABA 141.101.68.89 52826 127.0.0.1 7081
X-Real-IP: 141.101.68.89
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.68.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/psnlink/.env"] [unique_id "Z9qgX-UwY9aZRFZmYJA3nwAAABA"]
show less
Web App Attack
🇫🇷
172.71.127.9
19 Mar 2025
[19/Mar/2025:10:46:23.920152 0000] Z9qgf3Ks57x9kGLMkcP0WgAAAEY 172.71.127.9 53056 127.0.0.1 7081
X- ...
show more
[19/Mar/2025:10:46:23.920152 0000] Z9qgf3Ks57x9kGLMkcP0WgAAAEY 172.71.127.9 53056 127.0.0.1 7081
X-Real-IP: 172.71.127.9
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.127.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/rabbitmq-cluster/.env"] [unique_id "Z9qgf3Ks57x9kGLMkcP0WgAAAEY"]
show less
Web App Attack
🇫🇷
172.71.131.160
19 Mar 2025
[19/Mar/2025:10:45:16.447277 0000] Z9qgPOUwY9aZRFZmYJA3lgAAAAM 172.71.131.160 51066 127.0.0.1 7081
...
show more
[19/Mar/2025:10:45:16.447277 0000] Z9qgPOUwY9aZRFZmYJA3lgAAAAM 172.71.131.160 51066 127.0.0.1 7081
X-Real-IP: 172.71.131.160
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.131.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/laravel/core/.env.staging"] [unique_id "Z9qgPOUwY9aZRFZmYJA3lgAAAAM"]
show less
Web App Attack
🇫🇷
172.71.232.76
19 Mar 2025
[19/Mar/2025:10:46:56.532419 0000] Z9qgoHKs57x9kGLMkcP0YAAAAEg 172.71.232.76 48346 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:46:56.532419 0000] Z9qgoHKs57x9kGLMkcP0YAAAAEg 172.71.232.76 48346 127.0.0.1 7081
X-Real-IP: 172.71.232.76
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.232.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/resources/docker/.env"] [unique_id "Z9qgoHKs57x9kGLMkcP0YAAAAEg"]
show less
Web App Attack
🇫🇷
172.68.151.141
19 Mar 2025
[19/Mar/2025:10:44:43.354999 0000] Z9qgG-UwY9aZRFZmYJA3kwAAABc 172.68.151.141 42950 127.0.0.1 7081
...
show more
[19/Mar/2025:10:44:43.354999 0000] Z9qgG-UwY9aZRFZmYJA3kwAAABc 172.68.151.141 42950 127.0.0.1 7081
X-Real-IP: 172.68.151.141
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/.docker/laravel/app/.env"] [unique_id "Z9qgG-UwY9aZRFZmYJA3kwAAABc"]
show less
Web App Attack
🇫🇷
172.71.119.24
19 Mar 2025
[19/Mar/2025:10:42:56.869404 0000] Z9qfsOUwY9aZRFZmYJA3gAAAAAM 172.71.119.24 50864 127.0.0.1 7081
X ...
show more
[19/Mar/2025:10:42:56.869404 0000] Z9qfsOUwY9aZRFZmYJA3gAAAAAM 172.71.119.24 50864 127.0.0.1 7081
X-Real-IP: 172.71.119.24
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.119.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/new/.env.local"] [unique_id "Z9qfsOUwY9aZRFZmYJA3gAAAAAM"]
show less
Web App Attack
🇺🇸
150.136.74.77
18 Mar 2025
[18/Mar/2025:23:39:02.163501 0000] Z9oEFtdtv65rfZtgiCTPQAAAABM 150.136.74.77 36918 127.0.0.1 7080
X ...
show more
[18/Mar/2025:23:39:02.163501 0000] Z9oEFtdtv65rfZtgiCTPQAAAABM 150.136.74.77 36918 127.0.0.1 7080
X-Real-IP: 150.136.74.77
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 150.136.74.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/api/.env"] [unique_id "Z9oEFtdtv65rfZtgiCTPQAAAABM"]
show less
Web App Attack
🇫🇷
172.71.232.92
18 Mar 2025
[18/Mar/2025:16:13:29.360725 0000] Z9mbqd7jJd3vPySGppLZTgAAAEc 172.71.232.92 55542 127.0.0.1 7081
X ...
show more
[18/Mar/2025:16:13:29.360725 0000] Z9mbqd7jJd3vPySGppLZTgAAAEc 172.71.232.92 55542 127.0.0.1 7081
X-Real-IP: 172.71.232.92
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.232.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/site/.env"] [unique_id "Z9mbqd7jJd3vPySGppLZTgAAAEc"]
show less
Web App Attack
🇺🇸
162.241.69.133
17 Mar 2025
[2025-03-17 11:43:17.305] 2033974:67d80ad54a93b ERR [panel] [Action Log] Failed login attempt with l ...
show more
[2025-03-17 11:43:17.305] 2033974:67d80ad54a93b ERR [panel] [Action Log] Failed login attempt with login 'admin' from IP 162.241.69.133
[2025-03-17 11:44:02.828] 2040823:67d80b02ca4d3 ERR [panel] [Action Log] Failed login attempt with login 'admin' from IP 162.241.69.133
[2025-03-17 11:44:55.037] 2043619:67d80b370910e ERR [panel] [Action Log] Failed login attempt with login 'admin' from IP 162.241.69.133
show less
Brute-Force
🇫🇷
172.69.222.84
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
141.101.69.32
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
172.71.122.155
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
172.71.130.87
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
172.71.130.181
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
141.101.95.99
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
172.69.222.40
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇫🇷
172.71.130.180
17 Mar 2025
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
Web App Attack