๐ฑ๐น
154.216.20.134
18 Nov 2024
(smtpauth) Failed SMTP AUTH login from 154.216.20.134 (LT/Lithuania/-): 5 in the last 3600 secs; Por ...
show more
(smtpauth) Failed SMTP AUTH login from 154.216.20.134 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-11-18 03:38:13 login authenticator failed for (User) [154.216.20.134]: 535 Incorrect authentication data (set_id=๏ปฟ[email protected] )
2024-11-18 03:38:14 login authenticator failed for (User) [154.216.20.134]: 535 Incorrect authentication data (set_id=๏ปฟ[email protected] )
2024-11-18 03:38:14 login authenticator failed for (User) [154.216.20.134]: 535 Incorrect authentication data (set_id=๏ปฟ[email protected] )
2024-11-18 03:38:15 login authenticator failed for (User) [154.216.20.134]: 535 Incorrect authentication data (set_id=๏ปฟ[email protected] )
2024-11-18 03:38:16 login authenticator failed for (User) [154.216.20.134]: 535 Incorrect authentication data (set_id=๏ปฟ[email protected] )
show less
Brute-Force
SSH
๐ท๐ด
80.94.95.235
17 Nov 2024
(smtpauth) Failed SMTP AUTH login from 80.94.95.235 (HU/Hungary/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 80.94.95.235 (HU/Hungary/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-11-17 19:23:05 login authenticator failed for (User) [80.94.95.235]: 535 Incorrect authentication data ([email protected] )
2024-11-17 19:30:47 login authenticator failed for (User) [80.94.95.235]: 535 Incorrect authentication data ([email protected] )
2024-11-17 19:31:06 login authenticator failed for (User) [80.94.95.235]: 535 Incorrect authentication data ([email protected] )
2024-11-17 19:31:25 login authenticator failed for (User) [80.94.95.235]: 535 Incorrect authentication data ([email protected] )
2024-11-17 19:31:41 login authenticator failed for (User) [80.94.95.235]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
๐ฑ๐น
154.216.20.239
13 Nov 2024
(smtpauth) Failed SMTP AUTH login from 154.216.20.239 (LT/Lithuania/-): 5 in the last 3600 secs; Por ...
show more
(smtpauth) Failed SMTP AUTH login from 154.216.20.239 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-11-13 15:32:21 login authenticator failed for (User) [154.216.20.239]: 535 Incorrect authentication data ([email protected] )
2024-11-13 15:32:22 login authenticator failed for (User) [154.216.20.239]: 535 Incorrect authentication data ([email protected] )
2024-11-13 15:32:23 login authenticator failed for (User) [154.216.20.239]: 535 Incorrect authentication data ([email protected] )
2024-11-13 15:32:23 login authenticator failed for (User) [154.216.20.239]: 535 Incorrect authentication data ([email protected] )
2024-11-13 15:32:24 login authenticator failed for (User) [154.216.20.239]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
๐ท๐บ
45.135.232.70
13 Nov 2024
45.135.232.70 - - [13/Nov/2024:01:24:16 0000] "GET /wp-content/plugins/.git/config HTTP/1.0" 404 74 ...
show more
45.135.232.70 - - [13/Nov/2024:01:24:16 0000] "GET /wp-content/plugins/.git/config HTTP/1.0" 404 7409 "-" "Mozilla/5.0 (Linux; Android 10; HMA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Mobile Safari/537.36"
45.135.232.70 - - [13/Nov/2024:01:24:16 0000] "GET /wp-includes/js/.git/config HTTP/1.0" 404 7407 "-" "Mozilla/5.0 (SymbianOS/9.1; U; en-us) AppleWebKit/413 (KHTML, like Gecko) Safari/413"
45.135.232.70 - - [13/Nov/2024:01:24:16 0000] "GET /wiki/.git/config HTTP/1.0" 404 7411 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2; rv:10.0.1) Gecko/20100101 Firefox/10.0.1"
show less
Web App Attack
๐ฉ๐ช
162.19.192.193
12 Nov 2024
[12/Nov/2024:18:35:29.612773 0000] ZzOf8crdb6XWYXBDxDdliQAAAFE 162.19.192.193 54282 127.0.0.1 7080
...
show more
[12/Nov/2024:18:35:29.612773 0000] ZzOf8crdb6XWYXBDxDdliQAAAFE 162.19.192.193 54282 127.0.0.1 7080
X-Real-IP: 162.19.192.193
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 162.19.192.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env"] [unique_id "ZzOf8crdb6XWYXBDxDdliQAAAFE"]
show less
Web App Attack
๐บ๐ธ
3.128.26.192
12 Nov 2024
3.128.26.192 - - [12/Nov/2024:08:09:28 0000] "GET /dmxAppConnect/dmxAppConnect.js HTTP/1.1" 200 306 ...
show more
3.128.26.192 - - [12/Nov/2024:08:09:28 0000] "GET /dmxAppConnect/dmxAppConnect.js HTTP/1.1" 200 30659 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; Trident/5.0)"
3.128.26.192 - - [12/Nov/2024:08:09:28 0000] "GET /dmxAppConnect/dmxSockets/dmxSockets.js HTTP/1.1" 200 978 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_3 like Mac OS X; en-us) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8F190 Safari/6533.18.5"
3.128.26.192 - - [12/Nov/2024:08:09:28 0000] "GET /dmxAppConnect/dmxFormatter/dmxFormatter.js HTTP/1.1" 200 7975 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/10.0.601.0 Safari/534.14"
show less
Web App Attack
๐ฎ๐ฉ
103.215.25.250
09 Nov 2024
[09/Nov/2024:08:32:39.939843 0000] Zy8eJ7ZQ_uNi2YixNgkEzgAAAA4 103.215.25.250 43344 127.0.0.1 7080
...
show more
[09/Nov/2024:08:32:39.939843 0000] Zy8eJ7ZQ_uNi2YixNgkEzgAAAA4 103.215.25.250 43344 127.0.0.1 7080
X-Real-IP: 103.215.25.250
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 103.215.25.250] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\\\\\w \\\\\\\\/[\\\\\\\\w\\\\\\\\-\\\\\\\\.] )(?:;(?:charset=[\\\\\\\\w\\\\\\\\-]{1,18}|boundary=[\\\\\\\\w\\\\\\\\-] )?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||74.208.110.204|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "74.208.110.204"] [uri "/index.jsp"] [unique_id "Zy8eJ7ZQ_uNi2YixNgkEzgAAAA4"]
show less
Web App Attack
๐บ๐ธ
173.239.211.74
08 Nov 2024
[08/Nov/2024:02:30:23.098242 0000] Zy13v1hF3KZTtWyqbfemmgAAAFY 173.239.211.74 46536 127.0.0.1 7080
...
show more
[08/Nov/2024:02:30:23.098242 0000] Zy13v1hF3KZTtWyqbfemmgAAAFY 173.239.211.74 46536 127.0.0.1 7080
X-Real-IP: 173.239.211.74
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 173.239.211.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/src/.env"] [unique_id "Zy13v1hF3KZTtWyqbfemmgAAAFY"]
show less
Web App Attack
๐บ๐ธ
63.135.161.142
08 Nov 2024
[08/Nov/2024:02:28:13.869945 0000] Zy13PVhF3KZTtWyqbfemkQAAAEg 63.135.161.142 57632 127.0.0.1 7080
...
show more
[08/Nov/2024:02:28:13.869945 0000] Zy13PVhF3KZTtWyqbfemkQAAAEg 63.135.161.142 57632 127.0.0.1 7080
X-Real-IP: 63.135.161.142
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 63.135.161.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/api/.env"] [unique_id "Zy13PVhF3KZTtWyqbfemkQAAAEg"]
show less
Web App Attack
๐บ๐ธ
63.135.161.155
08 Nov 2024
[08/Nov/2024:02:28:50.785408 0000] Zy13YlhF3KZTtWyqbfemkwAAAEE 63.135.161.155 47358 127.0.0.1 7080
...
show more
[08/Nov/2024:02:28:50.785408 0000] Zy13YlhF3KZTtWyqbfemkwAAAEE 63.135.161.155 47358 127.0.0.1 7080
X-Real-IP: 63.135.161.155
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 63.135.161.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/services/.env"] [unique_id "Zy13YlhF3KZTtWyqbfemkwAAAEE"]
show less
Web App Attack
๐บ๐ธ
63.135.161.130
08 Nov 2024
[08/Nov/2024:02:27:50.707754 0000] Zy13JlhF3KZTtWyqbfemjgAAAEU 63.135.161.130 50176 127.0.0.1 7080
...
show more
[08/Nov/2024:02:27:50.707754 0000] Zy13JlhF3KZTtWyqbfemjgAAAEU 63.135.161.130 50176 127.0.0.1 7080
X-Real-IP: 63.135.161.130
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 63.135.161.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/erp/.env"] [unique_id "Zy13JlhF3KZTtWyqbfemjgAAAEU"]
show less
Web App Attack
๐จ๐ญ
179.43.168.146
05 Nov 2024
[05/Nov/2024:15:38:45.081795 0000] Zyo8BU8ybetA6df5CqDvbAAAAJI 179.43.168.146 38530 127.0.0.1 7080
...
show more
[05/Nov/2024:15:38:45.081795 0000] Zyo8BU8ybetA6df5CqDvbAAAAJI 179.43.168.146 38530 127.0.0.1 7080
X-Real-IP: 179.43.168.146
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 179.43.168.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env.prod"] [unique_id "Zyo8BU8ybetA6df5CqDvbAAAAJI"]
show less
Web App Attack
๐บ๐ฆ
172.68.238.7
01 Nov 2024
[01/Nov/2024:03:15:33.071162 0000] ZyRH1e3tI8DlMmpHuqDfiwAAABg 172.68.238.7 45036 127.0.0.1 7081
X- ...
show more
[01/Nov/2024:03:15:33.071162 0000] ZyRH1e3tI8DlMmpHuqDfiwAAABg 172.68.238.7 45036 127.0.0.1 7081
X-Real-IP: 172.68.238.7
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.238.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/wiki/.git/config"] [unique_id "ZyRH1e3tI8DlMmpHuqDfiwAAABg"]
show less
Web App Attack
๐บ๐ฆ
172.68.238.96
01 Nov 2024
[01/Nov/2024:03:15:33.067736 0000] ZyRH1ev0vhl00fHKFy_dnwAAANg 172.68.238.96 45022 127.0.0.1 7081
X ...
show more
[01/Nov/2024:03:15:33.067736 0000] ZyRH1ev0vhl00fHKFy_dnwAAANg 172.68.238.96 45022 127.0.0.1 7081
X-Real-IP: 172.68.238.96
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.238.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/web/.git/config"] [unique_id "ZyRH1ev0vhl00fHKFy_dnwAAANg"]
show less
Web App Attack
๐บ๐ฆ
172.68.238.88
01 Nov 2024
[01/Nov/2024:03:15:33.010311 0000] ZyRH1e3tI8DlMmpHuqDfiQAAABc 172.68.238.88 44994 127.0.0.1 7081
X ...
show more
[01/Nov/2024:03:15:33.010311 0000] ZyRH1e3tI8DlMmpHuqDfiQAAABc 172.68.238.88 44994 127.0.0.1 7081
X-Real-IP: 172.68.238.88
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 172.68.238.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/store/.git/config"] [unique_id "ZyRH1e3tI8DlMmpHuqDfiQAAABc"]
show less
Web App Attack
๐ฆ๐น
141.101.105.147
30 Oct 2024
[30/Oct/2024:22:06:26.164194 0000] ZyKt4mz17uXv-wHR6RjtVQAAAAI 141.101.105.147 58516 127.0.0.1 7081 ...
show more
[30/Oct/2024:22:06:26.164194 0000] ZyKt4mz17uXv-wHR6RjtVQAAAAI 141.101.105.147 58516 127.0.0.1 7081
X-Real-IP: 141.101.105.147
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.105.147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lowendtalk.co|F|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lowendtalk.co"] [uri "/webroot/config.php.old"] [unique_id "ZyKt4mz17uXv-wHR6RjtVQAAAAI"]
show less
Web App Attack
๐บ๐ธ
87.120.112.90
28 Oct 2024
[28/Oct/2024:01:10:26.392876 0000] Zx7kglC5CPOkdsBdYbnfaQAAAM4 87.120.112.90 53532 127.0.0.1 7080
X ...
show more
[28/Oct/2024:01:10:26.392876 0000] Zx7kglC5CPOkdsBdYbnfaQAAAM4 87.120.112.90 53532 127.0.0.1 7080
X-Real-IP: 87.120.112.90
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 87.120.112.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/laravel/.env"] [unique_id "Zx7kglC5CPOkdsBdYbnfaQAAAM4"]
show less
Web App Attack
๐ซ๐ท
193.177.162.132
25 Oct 2024
[25/Oct/2024:21:33:35.723179 0000] ZxwOrxTBx7IMmZVhWXM2cQAAAAg 193.177.162.132 46012 127.0.0.1 7080 ...
show more
[25/Oct/2024:21:33:35.723179 0000] ZxwOrxTBx7IMmZVhWXM2cQAAAAg 193.177.162.132 46012 127.0.0.1 7080
X-Real-IP: 193.177.162.132
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 193.177.162.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/new/.env.staging"] [unique_id "ZxwOrxTBx7IMmZVhWXM2cQAAAAg"]
show less
Web App Attack
๐บ๐ธ
87.120.126.72
25 Oct 2024
[25/Oct/2024:17:28:44.568219 0000] ZxvVTCjhC9wKiYVwDHgWowAAAM4 87.120.126.72 40384 127.0.0.1 7080
X ...
show more
[25/Oct/2024:17:28:44.568219 0000] ZxvVTCjhC9wKiYVwDHgWowAAAM4 87.120.126.72 40384 127.0.0.1 7080
X-Real-IP: 87.120.126.72
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 87.120.126.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/config/.git/config"] [unique_id "ZxvVTCjhC9wKiYVwDHgWowAAAM4"]
show less
Web App Attack
๐ฑ๐น
45.125.66.34
25 Oct 2024
(smtpauth) Failed SMTP AUTH login from 45.125.66.34 (LT/Lithuania/kasperskies.online): 5 in the last ...
show more
(smtpauth) Failed SMTP AUTH login from 45.125.66.34 (LT/Lithuania/kasperskies.online): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-25 07:11:31 login authenticator failed for (User) [45.125.66.34]: 535 Incorrect authentication data ([email protected] )
2024-10-25 07:11:31 login authenticator failed for (User) [45.125.66.34]: 535 Incorrect authentication data ([email protected] )
2024-10-25 07:11:32 login authenticator failed for (User) [45.125.66.34]: 535 Incorrect authentication data ([email protected] )
2024-10-25 07:11:32 login authenticator failed for (User) [45.125.66.34]: 535 Incorrect authentication data ([email protected] )
2024-10-25 07:11:33 login authenticator failed for (User) [45.125.66.34]: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
๐บ๐ธ
162.243.200.193
25 Oct 2024
[25/Oct/2024:03:56:42.618125 0000] ZxsW-ijhC9wKiYVwDHgUzgAAANc 162.243.200.193 37932 127.0.0.1 7080 ...
show more
[25/Oct/2024:03:56:42.618125 0000] ZxsW-ijhC9wKiYVwDHgUzgAAANc 162.243.200.193 37932 127.0.0.1 7080
X-Real-IP: 162.243.200.193
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 162.243.200.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/prod/.env"] [unique_id "ZxsW-ijhC9wKiYVwDHgUzgAAANc"]
show less
Web App Attack
๐ซ๐ท
178.215.236.18
24 Oct 2024
(smtpauth) Failed SMTP AUTH login from 178.215.236.18 (FR/France/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 178.215.236.18 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-24 18:25:57 login authenticator failed for (User) [178.215.236.18]: 535 Incorrect authentication data (set_id=admin)
2024-10-24 18:32:08 login authenticator failed for (User) [178.215.236.18]: 535 Incorrect authentication data (set_id=test)
2024-10-24 18:38:18 login authenticator failed for (User) [178.215.236.18]: 535 Incorrect authentication data (set_id=sales)
2024-10-24 18:44:31 login authenticator failed for (User) [178.215.236.18]: 535 Incorrect authentication data (set_id=scan)
2024-10-24 18:50:42 login authenticator failed for (User) [178.215.236.18]: 535 Incorrect authentication data (set_id=user)
show less
Brute-Force
SSH
๐ฆ๐น
108.162.220.75
24 Oct 2024
[24/Oct/2024:10:13:47.387763 0000] Zxod25L8n-W4_XVJtK03mQAAAAs 108.162.220.75 36082 127.0.0.1 7081
...
show more
[24/Oct/2024:10:13:47.387763 0000] Zxod25L8n-W4_XVJtK03mQAAAAs 108.162.220.75 36082 127.0.0.1 7081
X-Real-IP: 108.162.220.75
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 108.162.220.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/v2/.git/config"] [unique_id "Zxod25L8n-W4_XVJtK03mQAAAAs"]
show less
Web App Attack
๐ฆ๐น
108.162.220.123
24 Oct 2024
[24/Oct/2024:10:13:47.423743 0000] Zxod25EQPalXnwvDBMEnyAAAAMk 108.162.220.123 36124 127.0.0.1 7081 ...
show more
[24/Oct/2024:10:13:47.423743 0000] Zxod25EQPalXnwvDBMEnyAAAAMk 108.162.220.123 36124 127.0.0.1 7081
X-Real-IP: 108.162.220.123
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 108.162.220.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/wp-content/plugins/.git/config"] [unique_id "Zxod25EQPalXnwvDBMEnyAAAAMk"]
show less
Web App Attack
๐ฆ๐น
108.162.221.35
24 Oct 2024
[24/Oct/2024:10:13:47.250055 0000] Zxod25L8n-W4_XVJtK03lAAAAAQ 108.162.221.35 35992 127.0.0.1 7081
...
show more
[24/Oct/2024:10:13:47.250055 0000] Zxod25L8n-W4_XVJtK03lAAAAAQ 108.162.221.35 35992 127.0.0.1 7081
X-Real-IP: 108.162.221.35
Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 108.162.221.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/store/.git/config"] [unique_id "Zxod25L8n-W4_XVJtK03lAAAAAQ"]
show less
Web App Attack