🇹🇼
kk_it_man
2026-01-26 19:03:04
(7 months ago)
ET WEB_SERVER /etc/passwd Detected in URI
ET WEB_SERVER Attempt To Access MSSQL xp_cmdshell Stored ...
show more
ET WEB_SERVER /etc/passwd Detected in URI
ET WEB_SERVER Attempt To Access MSSQL xp_cmdshell Stored Procedure Via URI
ET WEB_SERVER Possible MySQL SQLi Attempt Information Schema Access
ET WEB_SERVER Possible SQL Injection Attempt UNION SELECT in HTTP URI
ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt
GPL WEB_SERVER 403 Forbidden
show less
Port Scan
🇹🇼
kk_it_man
2026-01-26 18:46:02
(7 months ago)
hack
Hacking
🇳🇱
Site.eu
2026-01-26 18:43:28
(7 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-01-26 17:52:55
(7 months ago)
(mod_security) mod_security (id:211190) triggered by 146.70.189.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 146.70.189.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:52:49.698909 2026] [security2:error] [pid 8906:tid 8986] [client 146.70.189.81:62625] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||adultbaja.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /chicaMain.php?__waf_test__=%27+OR+%271%27%3D%271%27+UNION+SELECT+NULL%2C%27%3Cscript%3Ealert%281%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+%2Fetc%2Fpasswd%27%29%23&cid=101"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adultbaja.com"] [uri "/chicaMain.php"] [unique_id "aXep8THargceYRBy-BmrDgAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 17:37:48
(7 months ago)
(mod_security) mod_security (id:211190) triggered by 146.70.189.81 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 146.70.189.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:37:43.227457 2026] [security2:error] [pid 682:tid 682] [client 146.70.189.81:65152] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||3905ccn.org|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /lookupLicensee.php?__waf_test__=%27+OR+%271%27%3D%271%27+UNION+SELECT+NULL%2C%27%3Cscript%3Ealert%281%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+%2Fetc%2Fpasswd%27%29%23&action=Lookup&callsign=KN6EWM"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/lookupLicensee.php"] [unique_id "aXemZ_84YJwfvU9UXbbO9QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇼
kk_it_man
2026-01-26 16:10:14
(7 months ago)
Hacking
2026-01-20 03:58:00
(7 months ago)
'+OR+'1'='1' UNION SELECT NULL,'<script>alert(1)</script>',table_name FROM information_schema.tables ...
show more
'+OR+'1'='1' UNION SELECT NULL,'<script>alert(1)</script>',table_name FROM information_schema.tables WHERE 2>1--/**/; EXEC xp_cmdshell('cat /etc/passwd')#
show less
Hacking
SQL Injection
Web App Attack
2026-01-20 03:51:00
(7 months ago)
SQLi
Hacking
SQL Injection
Web App Attack
🇦🇺
MAGIC
2026-01-20 00:00:14
(7 months ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-01-19 22:26:33
(7 months ago)
Web App Attack
SQL Injection
2026-01-19 22:05:02
(7 months ago)
Blocked: Reason='Auto-block'; Requests=0
Hacking
🇫🇮
danskefilm.dk
2026-01-19 22:00:01
(7 months ago)
SQL injection
SQL Injection
🇩🇪
HandyTreff.de
2026-01-19 21:58:02
(7 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -23.321 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -23.321 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Bad Web Bot
Web App Attack
🇪🇪
mex
2026-01-19 21:47:00
(7 months ago)
SQL-Injection
SQL Injection
🇬🇧
AvonleaConsulting
2025-12-17 16:28:13
(8 months ago)
Unrecognised attack
IoT Targeted