🇮🇱
spd.co.il
2026-07-08 19:01:36
(3 days ago)
Web application attack detected
Hacking
Web App Attack
2026-07-07 06:09:12
(4 days ago)
Querying for PHP services on a non-PHP site (/index.php)
Web App Attack
🇸🇪
KIDOS
2026-07-06 12:19:39
(5 days ago)
malicious activity
Web App Attack
🇫🇷
conseilgouz
2026-07-06 10:29:31
(5 days ago)
upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=artic ...
show more
upe-12 : Block return, carriage return, ... characters=>/index.php?option=com_content&view=article'&id=43&catid=8(')
show less
Hacking
🇺🇸
RidgeStar
2026-07-06 00:41:50
(5 days ago)
2026-07-05T13:13:15-07:00: display'"><script>alert(68752)</script>
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-07-05 22:52:22
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:52:00.400252 2026] [security2:error] [pid 32493:tid 32493] [client 170.124.32.132:54043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comments.barkdull.org"] [uri "/.env"] [unique_id "akrgEHbeQQP1YX60G6TXVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 22:36:42
(6 days ago)
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:36:35.999533 2026] [security2:error] [pid 19164:tid 19164] [client 170.124.32.132:33677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||coffeewitheinstein.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?main_page=page'\\x22><script>alert(68752)</script>&id=1100\\x90%critical"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "coffeewitheinstein.com"] [uri "/index.php"] [unique_id "akrccysK8h-1dDwLHYeDoAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-07-05 22:07:22
(6 days ago)
DB Admin Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 22:03:16
(6 days ago)
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:02:56.225981 2026] [security2:error] [pid 15595:tid 15595] [client 170.124.32.132:49639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||hanabritgermanshepherds.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php/component/content/article/index.php?option=com_content&view=article'\\x22><script>alert(68752)</script>&id=23&catid=2&itemid=116100\\x100%critical"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "hanabritgermanshepherds.com"] [uri "/index.php/component/content/article/index.php"] [unique_id "akrUkO3tkgsLeI42wpvLogAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 21:23:57
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 17:23:51.093560 2026] [security2:error] [pid 7753:tid 7850] [client 170.124.32.132:33777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aapm.info"] [uri "/.env.dev"] [unique_id "akrLZ7GAlwivjaT3KbVaYwAAAgc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 20:54:55
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:54:43.967226 2026] [security2:error] [pid 1861:tid 1861] [client 170.124.32.132:41889] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phuket-boatcharter.com"] [uri "/.env"] [unique_id "akrEk7JULvZvWQ7EQlHHMgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-05 20:48:47
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 20:09:50
(6 days ago)
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:212620) triggered by 170.124.32.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:09:33.350999 2026] [security2:error] [pid 14913:tid 14913] [client 170.124.32.132:56977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||watermarks.info|F|2"] [data "Matched Data: <script found within REQUEST_URI: /bus.php?tx&a=s&t=a&s=8&db=i&i=on&o=n&c&pw=on&v=0'\\x22><script>alert(68752)</script>&n=20&sk=0&l=i"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "watermarks.info"] [uri "/bus.php"] [unique_id "akq5_eU0waIOUpLkLpSDugAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RidgeStar
2026-07-05 20:08:24
(6 days ago)
2026-07-01T17:49:51-07:00: 51'"><script>alert(68752)</script>
2026-07-01T17 ...
show more
2026-07-01T17:49:51-07:00: 51'"><script>alert(68752)</script>
2026-07-01T17:49:40-07:00: 1'"><script>alert(68752)</script>
2026-07-01T17:49:27-07:00: 1'"><script>alert(68752)</script>
2026-07-01T17:49:20-07:00: 1'"><script>alert(68752)</script>
2026-07-01T17:10:00-07:00: All'"><script>alert(68752)</script>
show less
Port Scan
Hacking
🇩🇪
kommunos
2026-07-05 19:37:18
(6 days ago)
/phpmyadmin/
Web App Attack