|
🇫🇷
172.71.130.181
|
|
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
🇫🇷
141.101.95.99
|
|
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
🇫🇷
172.69.222.40
|
|
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
🇫🇷
172.71.130.180
|
|
Multiple failed abuse attempts detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack
|
|
🇫🇷
172.68.151.112
|
|
[13/Mar/2025:03:40:25.559033 0000] Z9JTqSodELp09QiISn8b5wAAABA 172.68.151.112 36130 127.0.0.1 7081
...
show more
[13/Mar/2025:03:40:25.559033 0000] Z9JTqSodELp09QiISn8b5wAAABA 172.68.151.112 36130 127.0.0.1 7081
X-Real-IP: 172.68.151.112
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/config/.htaccess"] [unique_id "Z9JTqSodELp09QiISn8b5wAAABA"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.127.123
|
|
[13/Mar/2025:03:40:46.007978 0000] Z9JTviodELp09QiISn8b8AAAAAI 172.71.127.123 59822 127.0.0.1 7081
...
show more
[13/Mar/2025:03:40:46.007978 0000] Z9JTviodELp09QiISn8b8AAAAAI 172.71.127.123 59822 127.0.0.1 7081
X-Real-IP: 172.71.127.123
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.127.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/ansible/.env"] [unique_id "Z9JTviodELp09QiISn8b8AAAAAI"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.127.112
|
|
[13/Mar/2025:03:40:37.742825 0000] Z9JTtSodELp09QiISn8b7gAAABc 172.71.127.112 59728 127.0.0.1 7081
...
show more
[13/Mar/2025:03:40:37.742825 0000] Z9JTtSodELp09QiISn8b7gAAABc 172.71.127.112 59728 127.0.0.1 7081
X-Real-IP: 172.71.127.112
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.127.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/ansible/.env"] [unique_id "Z9JTtSodELp09QiISn8b7gAAABc"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.134.193
|
|
[13/Mar/2025:03:40:32.717154 0000] Z9JTsNhkx6z4xj7hbiiW5gAAAEw 172.71.134.193 46316 127.0.0.1 7081
...
show more
[13/Mar/2025:03:40:32.717154 0000] Z9JTsNhkx6z4xj7hbiiW5gAAAEw 172.71.134.193 46316 127.0.0.1 7081
X-Real-IP: 172.71.134.193
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.134.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/config/.htpasswd"] [unique_id "Z9JTsNhkx6z4xj7hbiiW5gAAAEw"]
show less
|
Web App Attack
|
|
🇫🇷
172.68.151.4
|
|
[13/Mar/2025:03:40:11.508708 0000] Z9JTmyodELp09QiISn8b0wAAAA0 172.68.151.4 59648 127.0.0.1 7081
X- ...
show more
[13/Mar/2025:03:40:11.508708 0000] Z9JTmyodELp09QiISn8b0wAAAA0 172.68.151.4 59648 127.0.0.1 7081
X-Real-IP: 172.68.151.4
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/aws/.env.prod"] [unique_id "Z9JTmyodELp09QiISn8b0wAAAA0"]
show less
|
Web App Attack
|
|
🇫🇷
172.69.222.85
|
|
[13/Mar/2025:03:40:07.000995 0000] Z9JTlyodELp09QiISn8bzAAAAAg 172.69.222.85 59494 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:40:07.000995 0000] Z9JTlyodELp09QiISn8bzAAAAAg 172.69.222.85 59494 127.0.0.1 7081
X-Real-IP: 172.69.222.85
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.69.222.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/.htpasswd"] [unique_id "Z9JTlyodELp09QiISn8bzAAAAAg"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.119.61
|
|
[13/Mar/2025:03:40:18.971736 0000] Z9JToiodELp09QiISn8b2wAAABc 172.71.119.61 35996 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:40:18.971736 0000] Z9JToiodELp09QiISn8b2wAAABc 172.71.119.61 35996 127.0.0.1 7081
X-Real-IP: 172.71.119.61
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.119.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/k8s/.env"] [unique_id "Z9JToiodELp09QiISn8b2wAAABc"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.126.73
|
|
[13/Mar/2025:03:40:17.078298 0000] Z9JToSodELp09QiISn8b1wAAAAc 172.71.126.73 35898 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:40:17.078298 0000] Z9JToSodELp09QiISn8b1wAAAAc 172.71.126.73 35898 127.0.0.1 7081
X-Real-IP: 172.71.126.73
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.126.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/aws/.env.prod"] [unique_id "Z9JToSodELp09QiISn8b1wAAAAc"]
show less
|
Web App Attack
|
|
🇫🇷
172.68.151.111
|
|
[13/Mar/2025:03:39:58.456319 0000] Z9JTjthkx6z4xj7hbiiWsAAAAEI 172.68.151.111 45738 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:58.456319 0000] Z9JTjthkx6z4xj7hbiiWsAAAAEI 172.68.151.111 45738 127.0.0.1 7081
X-Real-IP: 172.68.151.111
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.151.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.lowendtalk.co|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lowendtalk.co"] [uri "/tmp/error.log"] [unique_id "Z9JTjthkx6z4xj7hbiiWsAAAAEI"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.232.95
|
|
[13/Mar/2025:03:39:52.184969 0000] Z9JTiNhkx6z4xj7hbiiWrAAAAFI 172.71.232.95 60418 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:39:52.184969 0000] Z9JTiNhkx6z4xj7hbiiWrAAAAFI 172.71.232.95 60418 127.0.0.1 7081
X-Real-IP: 172.71.232.95
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.232.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/test/.env"] [unique_id "Z9JTiNhkx6z4xj7hbiiWrAAAAFI"]
show less
|
Web App Attack
|
|
🇫🇷
141.101.95.96
|
|
[13/Mar/2025:03:39:33.802713 0000] Z9JTdSodELp09QiISn8brAAAABU 141.101.95.96 36536 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:39:33.802713 0000] Z9JTdSodELp09QiISn8brAAAABU 141.101.95.96 36536 127.0.0.1 7081
X-Real-IP: 141.101.95.96
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.95.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/wordpress/.env"] [unique_id "Z9JTdSodELp09QiISn8brAAAABU"]
show less
|
Web App Attack
|
|
🇫🇷
172.69.223.119
|
|
[13/Mar/2025:03:39:46.342614 0000] Z9JTgiodELp09QiISn8btQAAAAA 172.69.223.119 56482 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:46.342614 0000] Z9JTgiodELp09QiISn8btQAAAAA 172.69.223.119 56482 127.0.0.1 7081
X-Real-IP: 172.69.223.119
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.69.223.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/backups/.env"] [unique_id "Z9JTgiodELp09QiISn8btQAAAAA"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.127.31
|
|
[13/Mar/2025:03:39:38.814098 0000] Z9JTethkx6z4xj7hbiiWmwAAAFg 172.71.127.31 56358 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:39:38.814098 0000] Z9JTethkx6z4xj7hbiiWmwAAAFg 172.71.127.31 56358 127.0.0.1 7081
X-Real-IP: 172.71.127.31
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.127.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/wordpress/.env"] [unique_id "Z9JTethkx6z4xj7hbiiWmwAAAFg"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.127.133
|
|
[13/Mar/2025:03:39:40.239265 0000] Z9JTfCodELp09QiISn8btAAAAA8 172.71.127.133 56438 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:40.239265 0000] Z9JTfCodELp09QiISn8btAAAAA8 172.71.127.133 56438 127.0.0.1 7081
X-Real-IP: 172.71.127.133
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.127.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/db/.env"] [unique_id "Z9JTfCodELp09QiISn8btAAAAA8"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.131.28
|
|
[13/Mar/2025:03:39:51.523046 0000] Z9JThyodELp09QiISn8buQAAAAY 172.71.131.28 60386 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:39:51.523046 0000] Z9JThyodELp09QiISn8buQAAAAY 172.71.131.28 60386 127.0.0.1 7081
X-Real-IP: 172.71.131.28
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.131.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/backups/.env"] [unique_id "Z9JThyodELp09QiISn8buQAAAAY"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.131.208
|
|
[13/Mar/2025:03:39:15.073338 0000] Z9JTY9hkx6z4xj7hbiiWhgAAAE8 172.71.131.208 36910 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:15.073338 0000] Z9JTY9hkx6z4xj7hbiiWhgAAAE8 172.71.131.208 36910 127.0.0.1 7081
X-Real-IP: 172.71.131.208
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.131.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/.git/info/exclude"] [unique_id "Z9JTY9hkx6z4xj7hbiiWhgAAAE8"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.134.210
|
|
[13/Mar/2025:03:39:13.989477 0000] Z9JTYSodELp09QiISn8bowAAAAM 172.71.134.210 36834 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:13.989477 0000] Z9JTYSodELp09QiISn8bowAAAAM 172.71.134.210 36834 127.0.0.1 7081
X-Real-IP: 172.71.134.210
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.134.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/.git/info/exclude"] [unique_id "Z9JTYSodELp09QiISn8bowAAAAM"]
show less
|
Web App Attack
|
|
🇫🇷
141.101.95.90
|
|
[13/Mar/2025:03:38:42.520541 0000] Z9JTQthkx6z4xj7hbiiWUgAAAEo 141.101.95.90 43648 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:38:42.520541 0000] Z9JTQthkx6z4xj7hbiiWUgAAAEo 141.101.95.90 43648 127.0.0.1 7081
X-Real-IP: 141.101.95.90
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.95.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/private/.env"] [unique_id "Z9JTQthkx6z4xj7hbiiWUgAAAEo"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.122.149
|
|
[13/Mar/2025:03:38:30.171575 0000] Z9JTNthkx6z4xj7hbiiWRwAAAEs 172.71.122.149 59964 127.0.0.1 7081
...
show more
[13/Mar/2025:03:38:30.171575 0000] Z9JTNthkx6z4xj7hbiiWRwAAAEs 172.71.122.149 59964 127.0.0.1 7081
X-Real-IP: 172.71.122.149
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.122.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/config/.env"] [unique_id "Z9JTNthkx6z4xj7hbiiWRwAAAEs"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.134.42
|
|
[13/Mar/2025:03:38:30.115824 0000] Z9JTNiodELp09QiISn8bYQAAABY 172.71.134.42 59956 127.0.0.1 7081
X ...
show more
[13/Mar/2025:03:38:30.115824 0000] Z9JTNiodELp09QiISn8bYQAAABY 172.71.134.42 59956 127.0.0.1 7081
X-Real-IP: 172.71.134.42
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.134.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/config/.env"] [unique_id "Z9JTNiodELp09QiISn8bYQAAABY"]
show less
|
Web App Attack
|
|
🇫🇷
172.71.134.214
|
|
[13/Mar/2025:03:39:01.680917 0000] Z9JTVdhkx6z4xj7hbiiWfQAAAEY 172.71.134.214 37650 127.0.0.1 7081
...
show more
[13/Mar/2025:03:39:01.680917 0000] Z9JTVdhkx6z4xj7hbiiWfQAAAEY 172.71.134.214 37650 127.0.0.1 7081
X-Real-IP: 172.71.134.214
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.134.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/.gitignore"] [unique_id "Z9JTVdhkx6z4xj7hbiiWfQAAAEY"]
show less
|
Web App Attack
|