🇫🇷
IRISIO
2026-10-13 08:14:48
(4 days ago)
scans/SQL injection/spam posts : 305 queries
Web App Attack
SQL Injection
🇬🇧
openstrike.co.uk
2026-10-13 05:15:35
(4 days ago)
226 attacks on PHP URLs, VC URLs, shell probes, env grabbing URLs (type 2), password/key grabbing UR ...
show more
226 attacks on PHP URLs, VC URLs, shell probes, env grabbing URLs (type 2), password/key grabbing URLs, directory traversals, env grabbing URLs, config grabbing URLs (type 2):
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /.git/config HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /prisma/.env HTTP/1.1
GET /config/environment.json HTTP/1.1
show less
Web App Attack
Hacking
🇧🇪
taivas.nl
2026-10-13 04:33:42
(4 days ago)
Many_bad_calls
Web App Attack
🇯🇵
Tom Tamagawa
2026-10-13 02:24:00
(4 days ago)
PROBING FOR VULNERABILITIES.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-12 19:47:13
(4 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
deskpass.com
2026-10-12 19:10:20
(4 days ago)
GET /document.php
Web App Attack
🇳🇱
Savvii
2026-10-12 16:34:28
(4 days ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-10-12 16:04:47
(4 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
🇺🇸
TPI-Abuse
2026-10-12 15:52:39
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:52:33.398095 2026] [security2:error] [pid 13530:tid 13530] [client 34.47.55.96:52826] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thinkingepic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thinkingepic.com"] [uri "/z9x8c7v6b5-debug-trigger-thinkingepic.com"] [unique_id "as0CQSoSpA-YTp77kwEmAQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-12 15:34:37
(4 days ago)
2026/10/12 16:34:34 [error] 4060693#4060693: *2532369 access forbidden by rule, client: 34.47.55.96, ...
show more
2026/10/12 16:34:34 [error] 4060693#4060693: *2532369 access forbidden by rule, client: 34.47.55.96, server: simetria.org, request: "GET /core/.env HTTP/2.0", host: "simetria.org"
2026/10/12 16:34:34 [error] 4060694#4060694: *2532372 access forbidden by rule, client: 34.47.55.96, server: simetria.org, request: "GET /.next/.env HTTP/2.0", host: "simetria.org"
2026/10/12 16:34:34 [error] 4060694#4060694: *2532374 access forbidden by rule, client: 34.47.55.96, server: simetria.org, request: "GET /dist/.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack
2026-10-12 15:25:36
(4 days ago)
Blocked by fail2ban on a public web server.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 15:18:33
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:18:27.423650 2026] [security2:error] [pid 798:tid 798] [client 34.47.55.96:57486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||player-care.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "player-care.com"] [uri "/z9x8c7v6b5-debug-trigger-player-care.com"] [unique_id "asz6Qw8xVS9s_pojn5FkHwAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2026-10-12 14:57:00
(4 days ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇳🇱
Savvii
2026-10-12 14:54:50
(4 days ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 14:41:49
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.55.96 (96.55.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:41:46.124437 2026] [security2:error] [pid 13322:tid 13322] [client 34.47.55.96:35686] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jsommer.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jsommer.com"] [uri "/z9x8c7v6b5-debug-trigger-jsommer.com"] [unique_id "aszxqlU7MjtznAT1qIyZKQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack