🇩🇪
ghostwarriors
2026-11-12 19:23:24
UTC ·
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:22:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:21:56.574046 2026] [security2:error] [pid 28356:tid 28356] [client 40.87.23.91:57914] ModSe ...
show more
(mod_security) mod_security (id:210801) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:21:56.574046 2026] [security2:error] [pid 28356:tid 28356] [client 40.87.23.91:57914] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sqlmap" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||www.powerkiteforum.com|F|2"] [data "sqlmap/1.10.1.55#dev (https://sqlmap.org)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "avYDxNBg3P_FbM-VxNX2SQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2026-11-08 13:48:35
UTC ·
(5 days ago)
GET /events.cgi/af/interest.htm?product=%28SELECT%20%28CASE%20WHEN%20%283119%3D6302%29%20THEN%20%27Ul
Web App Attack
🇺🇸
kosada.com
2026-11-07 11:01:13
UTC ·
(6 days ago)
Repeated exploit attempts, for example: /category/apple/mach-ports?destination=%2Fcategory%2Fapple%2Fmach-ports%27%20AND%20EXTRACTVALUE%283669%2CCONCAT%280x5c%2C0x71707a7871%2C%28SELECT%20%28ELT%283669%3D3669%2C1%29%29%29%2C0x71766a6a71%29%29%20AND%2 ...
show more
Repeated exploit attempts, for example: /category/apple/mach-ports?destination=%2Fcategory%2Fapple%2Fmach-ports%27%20AND%20EXTRACTVALUE%283669%2CCONCAT%280x5c%2C0x71707a7871%2C%28SELECT%20%28ELT%283669%3D3669%2C1%29%29%29%2C0x71766a6a71%29%29%20AND%20%27IBaV%27%3D%27IBaV (HTTP/1.1 port 443, user agent: "sqlmap/1.10.1.55#dev (https://sqlmap.org)")
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-11-07 09:58:14
UTC ·
(6 days ago)
(mod_security) mod_security (id:210801) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:58:08.638428 2026] [security2:error] [pid 600981:tid 601003] [client 40.87.23.91:49578] Mod ...
show more
(mod_security) mod_security (id:210801) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:58:08.638428 2026] [security2:error] [pid 600981:tid 601003] [client 40.87.23.91:49578] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sqlmap" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||managementconsultantcertification.com|F|2"] [data "sqlmap/1.10.1.55#dev (https://sqlmap.org)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "managementconsultantcertification.com"] [uri "/Certified-Management-Consultant-Careers.html"] [unique_id "au72MAEMmuCrIZ_TGzmaeQAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
UJP
2026-11-07 03:22:00
UTC ·
(1 week ago)
素人
SQL Injection
🇩🇪
ghostwarriors
2026-11-06 20:50:50
UTC ·
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
HCF
2026-11-06 17:33:00
UTC ·
(1 week ago)
HTTP.URI.SQL.Injection, sqlmap.Scanner
Web App Attack
SQL Injection
Hacking
🇦🇺
afleventoffice.com.au
2026-11-06 15:56:54
UTC ·
(1 week ago)
GET /events.cgi/af/interest.htm?product=Ultimate_Suite_20&VoSE=4930%20AND%201%3D1%20UNION%20ALL%20SEL
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-06 04:32:38
UTC ·
(1 week ago)
SQLi Attempt
Hacking
SQL Injection
Web App Attack
2026-11-06 04:10:04
UTC ·
(1 week ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
🇺🇦
URAN Publishing Service
2026-11-03 12:07:51
UTC ·
(1 week ago)
SQLi Attempt
Hacking
SQL Injection
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-02 02:27:59
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-02 01:37:43
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:37:38.812960 2026] [security2:error] [pid 138977:tid 138987] [client 40.87.23.91:54719] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 40.87.23.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:37:38.812960 2026] [security2:error] [pid 138977:tid 138987] [client 40.87.23.91:54719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lifecoachcertified.com"] [uri "/.env"] [unique_id "aufpYuYZyUjjW7vv2OnjAQAAAQg"], referer: www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 00:08:42
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 40.87.23.91 (US/United States/-)
SQL Injection
