πΉπ·
94.156.177.121
20 Jan 2025
[20/Jan/2025:17:18:06.132580 0000] Z46FTnddRJclUjZhdx89gQAAAIQ 94.156.177.121 44944 127.0.0.1 7080
...
show more
[20/Jan/2025:17:18:06.132580 0000] Z46FTnddRJclUjZhdx89gQAAAIQ 94.156.177.121 44944 127.0.0.1 7080
X-Real-IP: 94.156.177.121
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 94.156.177.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env.production"] [unique_id "Z46FTnddRJclUjZhdx89gQAAAIQ"]
show less
Web App Attack
π±πΉ
194.0.234.135
20 Jan 2025
(smtpauth) Failed SMTP AUTH login from 194.0.234.135 (GB/United Kingdom/-): 5 in the last 3600 secs; ...
show more
(smtpauth) Failed SMTP AUTH login from 194.0.234.135 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-20 10:50:45 login authenticator failed for (User) [194.0.234.135]: 535 Incorrect authentication data ([email protected] )
2025-01-20 11:05:28 login authenticator failed for (User) [194.0.234.135]: 535 Incorrect authentication data ([email protected] )
2025-01-20 11:18:48 login authenticator failed for (User) [194.0.234.135]: 535 Incorrect authentication data ([email protected] )
2025-01-20 11:32:01 login authenticator failed for (User) [194.0.234.135]: 535 Incorrect authentication data ([email protected] )
2025-01-20 11:44:56 login authenticator failed for (User) [194.0.234.135]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
πΊπΈ
37.19.70.111
18 Jan 2025
(smtpauth) Failed SMTP AUTH login from 37.19.70.111 (US/United States/-): 5 in the last 3600 secs; P ...
show more
(smtpauth) Failed SMTP AUTH login from 37.19.70.111 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-18 23:15:06 login authenticator failed for (User) [37.19.70.111]: 535 Incorrect authentication data ([email protected] )
2025-01-18 23:15:07 login authenticator failed for (User) [37.19.70.111]: 535 Incorrect authentication data ([email protected] )
2025-01-18 23:15:07 login authenticator failed for (User) [37.19.70.111]: 535 Incorrect authentication data ([email protected] )
2025-01-18 23:15:08 login authenticator failed for (User) [37.19.70.111]: 535 Incorrect authentication data ([email protected] )
2025-01-18 23:15:08 login authenticator failed for (User) [37.19.70.111]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
πΊπΈ
45.151.99.245
18 Jan 2025
(smtpauth) Failed SMTP AUTH login from 45.151.99.245 (GB/United Kingdom/-): 5 in the last 3600 secs; ...
show more
(smtpauth) Failed SMTP AUTH login from 45.151.99.245 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-18 15:18:03 login authenticator failed for (User) [45.151.99.245]: 535 Incorrect authentication data (set_id=test)
2025-01-18 15:26:35 login authenticator failed for (User) [45.151.99.245]: 535 Incorrect authentication data (set_id=info)
2025-01-18 15:34:40 login authenticator failed for (User) [45.151.99.245]: 535 Incorrect authentication data (set_id=admin)
2025-01-18 15:42:45 login authenticator failed for (User) [45.151.99.245]: 535 Incorrect authentication data (set_id=prueba)
2025-01-18 15:50:40 login authenticator failed for (User) [45.151.99.245]: 535 Incorrect authentication data (set_id=teste)
show less
Brute-Force
SSH
π¬π§
78.153.140.203
16 Jan 2025
[16/Jan/2025:09:25:31.540987 0000] Z4jQi7eRbCS4a4V7FzH3EgAAABA 78.153.140.203 58704 127.0.0.1 7080
...
show more
[16/Jan/2025:09:25:31.540987 0000] Z4jQi7eRbCS4a4V7FzH3EgAAABA 78.153.140.203 58704 127.0.0.1 7080
X-Real-IP: 78.153.140.203
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/DEV/.env"] [unique_id "Z4jQi7eRbCS4a4V7FzH3EgAAABA"]
show less
Web App Attack
π³π±
156.233.225.192
15 Jan 2025
[15/Jan/2025:20:39:46.496641 0000] Z4gdEtWetl02hu2qDDMr4AAAAAA 156.233.225.192 48146 127.0.0.1 7080 ...
show more
[15/Jan/2025:20:39:46.496641 0000] Z4gdEtWetl02hu2qDDMr4AAAAAA 156.233.225.192 48146 127.0.0.1 7080
X-Real-IP: 156.233.225.192
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 156.233.225.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/api/.env"] [unique_id "Z4gdEtWetl02hu2qDDMr4AAAAAA"]
show less
Web App Attack
πΊπΈ
45.151.99.240
15 Jan 2025
(smtpauth) Failed SMTP AUTH login from 45.151.99.240 (GB/United Kingdom/-): 5 in the last 3600 secs; ...
show more
(smtpauth) Failed SMTP AUTH login from 45.151.99.240 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-15 18:16:45 login authenticator failed for (User) [45.151.99.240]: 535 Incorrect authentication data ([email protected] )
2025-01-15 18:30:45 login authenticator failed for (User) [45.151.99.240]: 535 Incorrect authentication data ([email protected] )
2025-01-15 18:44:58 login authenticator failed for (User) [45.151.99.240]: 535 Incorrect authentication data ([email protected] )
2025-01-15 18:57:29 login authenticator failed for (User) [45.151.99.240]: 535 Incorrect authentication data ([email protected] )
2025-01-15 19:09:41 login authenticator failed for (User) [45.151.99.240]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
π©πͺ
172.70.250.78
13 Jan 2025
[13/Jan/2025:11:24:16.563773 0000] Z4T34Bkn4SIUAOq-dCnJlQAAAAo 172.70.250.78 36172 127.0.0.1 7081
X ...
show more
[13/Jan/2025:11:24:16.563773 0000] Z4T34Bkn4SIUAOq-dCnJlQAAAAo 172.70.250.78 36172 127.0.0.1 7081
X-Real-IP: 172.70.250.78
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.250.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/app/.env"] [unique_id "Z4T34Bkn4SIUAOq-dCnJlQAAAAo"]
show less
Web App Attack
π©πͺ
172.71.164.114
13 Jan 2025
[13/Jan/2025:11:24:10.738268 0000] Z4T32hkn4SIUAOq-dCnJjAAAAAE 172.71.164.114 36046 127.0.0.1 7081
...
show more
[13/Jan/2025:11:24:10.738268 0000] Z4T32hkn4SIUAOq-dCnJjAAAAAE 172.71.164.114 36046 127.0.0.1 7081
X-Real-IP: 172.71.164.114
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.164.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/backup/.env"] [unique_id "Z4T32hkn4SIUAOq-dCnJjAAAAAE"]
show less
Web App Attack
π©πͺ
172.71.172.48
13 Jan 2025
[13/Jan/2025:11:24:13.338312 0000] Z4T33Rkn4SIUAOq-dCnJjQAAAAI 172.71.172.48 36088 127.0.0.1 7081
X ...
show more
[13/Jan/2025:11:24:13.338312 0000] Z4T33Rkn4SIUAOq-dCnJjQAAAAI 172.71.172.48 36088 127.0.0.1 7081
X-Real-IP: 172.71.172.48
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.172.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/application/.env"] [unique_id "Z4T33Rkn4SIUAOq-dCnJjQAAAAI"]
show less
Web App Attack
π©πͺ
172.70.247.137
13 Jan 2025
[13/Jan/2025:10:10:47.656728 0000] Z4Tmpxkn4SIUAOq-dCnJTQAAAA8 172.70.247.137 51752 127.0.0.1 7081
...
show more
[13/Jan/2025:10:10:47.656728 0000] Z4Tmpxkn4SIUAOq-dCnJTQAAAA8 172.70.247.137 51752 127.0.0.1 7081
X-Real-IP: 172.70.247.137
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.247.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/blog/.env"] [unique_id "Z4Tmpxkn4SIUAOq-dCnJTQAAAA8"]
show less
Web App Attack
π©πͺ
172.70.250.166
13 Jan 2025
[13/Jan/2025:10:10:51.345050 0000] Z4Tmq0_KN3v_k1nv0Tua4QAAAJQ 172.70.250.166 51832 127.0.0.1 7081
...
show more
[13/Jan/2025:10:10:51.345050 0000] Z4Tmq0_KN3v_k1nv0Tua4QAAAJQ 172.70.250.166 51832 127.0.0.1 7081
X-Real-IP: 172.70.250.166
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.70.250.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/web/.env"] [unique_id "Z4Tmq0_KN3v_k1nv0Tua4QAAAJQ"]
show less
Web App Attack
π©πͺ
172.71.250.112
13 Jan 2025
[13/Jan/2025:10:10:44.431647 0000] Z4TmpBkn4SIUAOq-dCnJRwAAAAk 172.71.250.112 34708 127.0.0.1 7081
...
show more
[13/Jan/2025:10:10:44.431647 0000] Z4TmpBkn4SIUAOq-dCnJRwAAAAk 172.71.250.112 34708 127.0.0.1 7081
X-Real-IP: 172.71.250.112
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.71.250.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/laravel/.env"] [unique_id "Z4TmpBkn4SIUAOq-dCnJRwAAAAk"]
show less
Web App Attack
π·π΄
80.94.95.228
10 Jan 2025
(smtpauth) Failed SMTP AUTH login from 80.94.95.228 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 80.94.95.228 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-10 20:17:54 login authenticator failed for (User) [80.94.95.228]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:18:12 login authenticator failed for (User) [80.94.95.228]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:18:26 login authenticator failed for (User) [80.94.95.228]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:18:42 login authenticator failed for (User) [80.94.95.228]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:19:01 login authenticator failed for (User) [80.94.95.228]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
π·π΄
80.94.95.214
10 Jan 2025
(smtpauth) Failed SMTP AUTH login from 80.94.95.214 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 80.94.95.214 (BG/Bulgaria/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-10 20:16:10 login authenticator failed for (User) [80.94.95.214]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:16:20 login authenticator failed for (User) [80.94.95.214]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:16:37 login authenticator failed for (User) [80.94.95.214]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:16:54 login authenticator failed for (User) [80.94.95.214]: 535 Incorrect authentication data ([email protected] )
2025-01-10 20:17:10 login authenticator failed for (User) [80.94.95.214]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
π³π±
154.203.197.178
09 Jan 2025
(smtpauth) Failed SMTP AUTH login from 154.203.197.178 (NL/The Netherlands/-): 5 in the last 3600 se ...
show more
(smtpauth) Failed SMTP AUTH login from 154.203.197.178 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-09 20:12:55 login authenticator failed for (User) [154.203.197.178]: 535 Incorrect authentication data (set_id=user)
2025-01-09 20:24:01 login authenticator failed for (User) [154.203.197.178]: 535 Incorrect authentication data (set_id=admin)
2025-01-09 20:35:45 login authenticator failed for (User) [154.203.197.178]: 535 Incorrect authentication data (set_id=test)
2025-01-09 20:47:24 login authenticator failed for (User) [154.203.197.178]: 535 Incorrect authentication data (set_id=scan)
2025-01-09 20:58:36 login authenticator failed for (User) [154.203.197.178]: 535 Incorrect authentication data (set_id=spam)
show less
Brute-Force
SSH
πͺπΈ
92.114.59.139
09 Jan 2025
[09/Jan/2025:02:32:35.408825 0000] Z381Qww5tsuZ8J4ikR3WNQAAAAQ 92.114.59.139 34758 127.0.0.1 7080
X ...
show more
[09/Jan/2025:02:32:35.408825 0000] Z381Qww5tsuZ8J4ikR3WNQAAAAQ 92.114.59.139 34758 127.0.0.1 7080
X-Real-IP: 92.114.59.139
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 92.114.59.139] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\\\\\w \\\\\\\\/[\\\\\\\\w\\\\\\\\-\\\\\\\\.] )(?:;(?:charset=[\\\\\\\\w\\\\\\\\-]{1,18}|boundary=[\\\\\\\\w\\\\\\\\-] )?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||74.208.110.204|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "74.208.110.204"] [uri "/index.jsp"] [unique_id "Z381Qww5tsuZ8J4ikR3WNQAAAAQ"]
show less
Web App Attack
π¬π§
31.171.130.52
08 Jan 2025
[08/Jan/2025:02:54:22.000928 0000] Z33o3oLF-DqSOge7lw3yxQAAABE 31.171.130.52 37728 127.0.0.1 7080
X ...
show more
[08/Jan/2025:02:54:22.000928 0000] Z33o3oLF-DqSOge7lw3yxQAAABE 31.171.130.52 37728 127.0.0.1 7080
X-Real-IP: 31.171.130.52
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 31.171.130.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/rest/.env"] [unique_id "Z33o3oLF-DqSOge7lw3yxQAAABE"]
show less
Web App Attack
πΊπΈ
45.151.99.228
05 Jan 2025
(smtpauth) Failed SMTP AUTH login from 45.151.99.228 (GB/United Kingdom/-): 5 in the last 3600 secs; ...
show more
(smtpauth) Failed SMTP AUTH login from 45.151.99.228 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2025-01-05 17:35:12 login authenticator failed for (User) [45.151.99.228]: 535 Incorrect authentication data ([email protected] )
2025-01-05 17:48:49 login authenticator failed for (User) [45.151.99.228]: 535 Incorrect authentication data ([email protected] )
2025-01-05 18:02:15 login authenticator failed for (User) [45.151.99.228]: 535 Incorrect authentication data ([email protected] )
2025-01-05 18:15:52 login authenticator failed for (User) [45.151.99.228]: 535 Incorrect authentication data ([email protected] )
2025-01-05 18:32:43 login authenticator failed for (User) [45.151.99.228]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
π©πͺ
173.249.17.93
03 Jan 2025
[03/Jan/2025:23:27:39.676042 0000] Z3hya-NgkHwJeWgvZvA2DgAAAI4 173.249.17.93 49336 127.0.0.1 7080
X ...
show more
[03/Jan/2025:23:27:39.676042 0000] Z3hya-NgkHwJeWgvZvA2DgAAAI4 173.249.17.93 49336 127.0.0.1 7080
X-Real-IP: 173.249.17.93
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 173.249.17.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/new/.env"] [unique_id "Z3hya-NgkHwJeWgvZvA2DgAAAI4"]
show less
Web App Attack
πΈπ¬
140.245.46.21
03 Jan 2025
[03/Jan/2025:05:27:30.157437 0000] Z3d1QuNgkHwJeWgvZvAzWgAAAJQ 140.245.46.21 57632 127.0.0.1 7080
X ...
show more
[03/Jan/2025:05:27:30.157437 0000] Z3d1QuNgkHwJeWgvZvAzWgAAAJQ 140.245.46.21 57632 127.0.0.1 7080
X-Real-IP: 140.245.46.21
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 140.245.46.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plesk.astrovia.gg"] [uri "/api/.env"] [unique_id "Z3d1QuNgkHwJeWgvZvAzWgAAAJQ"]
show less
Web App Attack
π«π·
193.41.206.36
30 Dec 2024
[30/Dec/2024:01:16:54.019047 0000] Z3H0hmutQ19Q2pnfXrUGkgAAAAc 193.41.206.36 38088 127.0.0.1 7080
X ...
show more
[30/Dec/2024:01:16:54.019047 0000] Z3H0hmutQ19Q2pnfXrUGkgAAAAc 193.41.206.36 38088 127.0.0.1 7080
X-Real-IP: 193.41.206.36
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 193.41.206.36] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||74.208.110.204|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "74.208.110.204"] [uri "/storage/logs/laravel.log"] [unique_id "Z3H0hmutQ19Q2pnfXrUGkgAAAAc"]
show less
Web App Attack
π©πͺ
85.203.15.154
22 Dec 2024
[22/Dec/2024:22:40:19.196478 0000] Z2iVU6BXQMPujnkFwvVlPQAAABE 85.203.15.154 49338 127.0.0.1 7080
X ...
show more
[22/Dec/2024:22:40:19.196478 0000] Z2iVU6BXQMPujnkFwvVlPQAAABE 85.203.15.154 49338 127.0.0.1 7080
X-Real-IP: 85.203.15.154
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env.project "] [unique_id "Z2iVU6BXQMPujnkFwvVlPQAAABE"]
show less
Web App Attack
π±πΉ
194.169.175.26
19 Dec 2024
(smtpauth) Failed SMTP AUTH login from 194.169.175.26 (LT/Lithuania/-): 5 in the last 3600 secs; Por ...
show more
(smtpauth) Failed SMTP AUTH login from 194.169.175.26 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-12-19 20:38:25 login authenticator failed for (User) [194.169.175.26]: 535 Incorrect authentication data ([email protected] )
2024-12-19 20:39:54 login authenticator failed for (User) [194.169.175.26]: 535 Incorrect authentication data ([email protected] )
2024-12-19 20:41:02 login authenticator failed for (User) [194.169.175.26]: 535 Incorrect authentication data ([email protected] )
2024-12-19 20:42:09 login authenticator failed for (User) [194.169.175.26]: 535 Incorrect authentication data ([email protected] )
2024-12-19 20:43:12 login authenticator failed for (User) [194.169.175.26]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
π«π·
178.215.236.213
14 Dec 2024
(smtpauth) Failed SMTP AUTH login from 178.215.236.213 (FR/France/-): 5 in the last 3600 secs; Ports ...
show more
(smtpauth) Failed SMTP AUTH login from 178.215.236.213 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-12-14 18:32:07 login authenticator failed for (User) [178.215.236.213]: 535 Incorrect authentication data ([email protected] )
2024-12-14 18:32:08 login authenticator failed for (User) [178.215.236.213]: 535 Incorrect authentication data ([email protected] )
2024-12-14 18:32:09 login authenticator failed for (User) [178.215.236.213]: 535 Incorrect authentication data ([email protected] )
2024-12-14 18:32:10 login authenticator failed for (User) [178.215.236.213]: 535 Incorrect authentication data ([email protected] )
2024-12-14 18:32:11 login authenticator failed for (User) [178.215.236.213]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH