🇩🇪
london2038.com
2025-12-20 04:31:59
UTC ·
(10 months ago)
Malformed or malicious web request
34.145.55.142 - - [20/Dec/2025:05:31:57 +0100] "GET /index.php?title=Category:Unique_Items&pageuntil=Koehlert's Wrath HTTP/1.1" 400 157 "-" "-"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-20 03:55:38
UTC ·
(10 months ago)
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 22:55:33.747598 2025] [security2:error] [pid 9128:tid 9 ...
show more
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 22:55:33.747598 2025] [security2:error] [pid 9128:tid 9128] [client 34.145.55.142:56427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||fabwestmfg.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /engineering.php?t=<script>alert('xss')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "fabwestmfg.com"] [uri "/engineering.php"] [unique_id "aUYeNd7uFqsKD687yl6GfAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-12-20 03:03:00
UTC ·
(10 months ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
fortypoundhead
2025-12-20 02:00:09
UTC ·
(10 months ago)
SQL Injection Attempt
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-12-20 01:40:16
UTC ·
(10 months ago)
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 20:40:12.003224 2025] [security2:error] [pid 26056:tid ...
show more
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 20:40:12.003224 2025] [security2:error] [pid 26056:tid 26056] [client 34.145.55.142:63553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||csme-eprr.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /cardorder/index.htm?a=<script>alert('xss')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "csme-eprr.com"] [uri "/cardorder/index.htm"] [unique_id "aUX-fAaq5u-bQbzYwu54qQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-12-20 01:16:18
UTC ·
(10 months ago)
Attempting to access restricted files
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-20 01:15:19
UTC ·
(10 months ago)
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 20:15:13.005535 2025] [security2:error] [pid 26150:tid ...
show more
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 20:15:13.005535 2025] [security2:error] [pid 26150:tid 26165] [client 34.145.55.142:58341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||gapm.eu|F|2"] [data "Matched Data: <script found within REQUEST_URI: /iapm-article64ad.html?cat=&id=<script>alert('xss')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "gapm.eu"] [uri "/iapm-article64ad.html"] [unique_id "aUX4oRD3S7Klxw-ldx_w4gAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇼
kk_it_man
2025-12-20 01:13:02
UTC ·
(10 months ago)
ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt
Port Scan
🇫🇷
Sklurk
2025-12-20 00:03:29
UTC ·
(10 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-12-19 23:54:24
UTC ·
(10 months ago)
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 18:54:20.626059 2025] [security2:error] [pid 29402:tid ...
show more
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 18:54:20.626059 2025] [security2:error] [pid 29402:tid 29402] [client 34.145.55.142:61516] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||alltecmachine.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /?itemid=232&id=34&option=<script>alert('xss')</script>&view=page"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "alltecmachine.com"] [uri "/"] [unique_id "aUXlrOfeo8AYxEbLIzxBogAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tonga-Soa
2025-12-19 23:01:53
UTC ·
(10 months ago)
"Inject SQL SELECT ... etc%2fpasswd..."
Hacking
SQL Injection
🇨🇦
polycoda
2025-12-19 21:28:28
UTC ·
(10 months ago)
AutoBlock: 💉 SQL Injection Attempt (Non Decay-Based) - 📂 Directory Traversal (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-19 20:17:48
UTC ·
(10 months ago)
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 15:17:41.658738 2025] [security2:error] [pid 4471:tid 4 ...
show more
(mod_security) mod_security (id:212620) triggered by 34.145.55.142 (142.55.145.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 15:17:41.658738 2025] [security2:error] [pid 4471:tid 4471] [client 34.145.55.142:55945] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||thegoldentether.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /board/viewtopic.php?p=<script>alert('xss')</script>&sid=7cf8c4a302d18c415e951bd54c92363a"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "thegoldentether.com"] [uri "/board/viewtopic.php"] [unique_id "aUWy5ZUx5Dn2nOxQk_Ng3AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-02-10 11:21:31
UTC ·
(1 year ago)
Automatic report - Vulnerability scan
/favicon.ico
Web App Attack
Anonymous
2025-02-10 03:30:11
UTC ·
(1 year ago)
Automatic report - Vulnerability scan
/web.config
Web App Attack