🇺🇸
gu-alvareza
2026-07-07 07:05:18
(12 hours ago)
Cross.Site.Scripting
Web App Attack
Hacking
2026-07-07 06:09:12
(13 hours ago)
Querying for PHP services on a non-PHP site (/components/com_moofaq/includes/file_includer.php)
Web App Attack
2026-07-06 13:12:59
(1 day ago)
Atividade Suspeita.
Hacking
🇸🇪
KIDOS
2026-07-06 12:19:34
(1 day ago)
malicious activity
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 11:37:06
(1 day ago)
(mod_security) mod_security (id:212620) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:212620) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 07:36:52.353113 2026] [security2:error] [pid 23860:tid 23860] [client 170.124.32.144:43739] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||verenacastle.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /g12cartcontents.php?fromwhere=g12generic.php'\\x22><script>alert(68752)</script>&fromwhat=itemdetail&itemid=*"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "verenacastle.com"] [uri "/g12cartcontents.php"] [unique_id "akuTVJsI11pJW6MS_yAJzQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-07-06 10:42:16
(1 day ago)
upe-11 : Block illegal characters=>/index.php?option=com_content&view=*%27%22%3E%3Cscript%3Ealer ...
show more
upe-11 : Block illegal characters=>/index.php?option=com_content&view=*%27%22%3E%3Cscript%3Ealert(68752)%3C/script%3E&id=43&...(alert(alert)
show less
Hacking
🇺🇸
Starburst SysOp Team
2026-07-06 10:26:10
(1 day ago)
(mod_security-custom) mod_security (id:212620) triggered by 170.124.32.144 (US/United States/Marylan ...
show more
(mod_security-custom) mod_security (id:212620) triggered by 170.124.32.144 (US/United States/Maryland/Lanham-Seabrook/-/[AS6079 RCN-AS]): 1 in the last 3600 secs (0-srv1)
show less
Hacking
🇵🇹
Information Security
2026-07-06 00:30:06
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
RidgeStar
2026-07-06 00:28:00
(1 day ago)
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-07-05 23:17:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 19:17:06.512069 2026] [security2:error] [pid 14471:tid 14471] [client 170.124.32.144:51191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coffeewitheinstein.com"] [uri "/.env.development.local"] [unique_id "akrl8tR58CwdY2_kn2c5twAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 22:52:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:52:00.383636 2026] [security2:error] [pid 27275:tid 27275] [client 170.124.32.144:43169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comments.barkdull.org"] [uri "/.env.prod.local"] [unique_id "akrgEHoSiABTRP97atGARwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 22:37:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 18:36:57.355690 2026] [security2:error] [pid 17071:tid 17071] [client 170.124.32.144:47211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanabritgermanshepherds.com"] [uri "/.env.prod"] [unique_id "akrciYinc3a-W4yIPRj8KQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RidgeStar
2026-07-05 21:23:01
(1 day ago)
2026-07-05T13:06:31-07:00: 89'"><script>alert(68752)</script>
2026-07-01T17 ...
show more
2026-07-05T13:06:31-07:00: 89'"><script>alert(68752)</script>
2026-07-01T17:49:51-07:00: '"><script>alert(68752)</script>
2026-07-01T17:49:34-07:00: 1'"><script>alert(68752)</script>
2026-07-01T17:49:13-07:00: 128369'"><script>alert(68752)</script>
2026-07-01T17:09:59-07:00: G'"><script>alert(68752)</script>
show less
Port Scan
Hacking
2026-07-05 21:06:06
(1 day ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 20:46:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.124.32.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 16:46:12.601815 2026] [security2:error] [pid 13999:tid 14006] [client 170.124.32.144:48241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killerrockandroll.com"] [uri "/.env.development.local"] [unique_id "akrClNuR1F7DDVVtw0B45AAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack