🇺🇸
TPI-Abuse
2026-10-26 18:24:13
(2 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:24:09.371883 2026] [security2:error] [pid 5182:tid 5182] [client 41.141.160.60:23341] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||teguer.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "teguer.com"] [uri "/index.php"] [unique_id "at-aySw-XjD0gTVN06L8zgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 17:54:37
(3 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:54:34.392755 2026] [security2:error] [pid 13937:tid 13937] [client 41.141.160.60:27746] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||sub-sea9gas.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "sub-sea9gas.com"] [uri "/index.php"] [unique_id "at-T2nQlHEgtbW8DHeNwwgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-26 17:15:06
(3 hours ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01]
Hacking
SQL Injection
Web App Attack
🇩🇪
FeG Deutschland
2026-10-26 16:20:01
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 16:09:21
(5 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:09:16.750020 2026] [security2:error] [pid 9505:tid 9505] [client 41.141.160.60:18621] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||salinabible.org|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "salinabible.org"] [uri "/index.php"] [unique_id "at97LL1bnRPaTG5ZGXVlMQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
ki3
2026-10-26 13:32:10
(7 hours ago)
Fail2Ban: Web App Attacks and Forum Spam 41.141.160.60 1793021529.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 12:41:28
(8 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 08:41:25.342538 2026] [security2:error] [pid 788:tid 788] [client 41.141.160.60:23104] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||psicologos-omega.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "psicologos-omega.com"] [uri "/index.php"] [unique_id "at9KdVCzY9uKLsR_te3j1wAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-10-26 12:36:39
(8 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-26 09:53:30
(11 hours ago)
[Mon Oct 26 20:53:28.887015 2026] [security2:error] [pid 99811] [client 41.141.160.60:11266] [client ...
show more
[Mon Oct 26 20:53:28.887015 2026] [security2:error] [pid 99811] [client 41.141.160.60:11266] [client 41.141.160.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/index.php"] [unique_id "at8jGIueiQuOp5lrXv9pawAAAAU"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 08:53:54
(12 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:53:48.862859 2026] [security2:error] [pid 13135:tid 13144] [client 41.141.160.60:63944] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||nextlevelpsych.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "nextlevelpsych.com"] [uri "/index.php"] [unique_id "at8VHHIGXx8_qhQEcURJ1wAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sorgin Informatique
2026-10-26 08:47:50
(12 hours ago)
nee-7 : Trying access unauthorized files/dir=>/index.php?option=com_easystore&view=products& ...
show more
nee-7 : Trying access unauthorized files/dir=>/index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-26 07:34:10
(13 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 03:34:07.132187 2026] [security2:error] [pid 16178:tid 16178] [client 41.141.160.60:46954] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||mathewsdental.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "mathewsdental.com"] [uri "/index.php"] [unique_id "at8CbxpJVzDcM2LnJxtK3AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ap_ram
2026-10-26 07:18:02
(13 hours ago)
mae-11 : Block illegal characters=>/index.php?option=com_easystore&view=products&task=search ...
show more
mae-11 : Block illegal characters=>/index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-(CHAR(CHAR)
show less
Hacking
🇫🇷
conseilgouz
2026-10-26 07:02:14
(14 hours ago)
loe-11 : Block illegal characters=>/index.php?option=com_easystore&view=products&task=search ...
show more
loe-11 : Block illegal characters=>/index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-(CHAR(CHAR)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-26 04:47:14
(16 hours ago)
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211540) triggered by 41.141.160.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 00:47:09.321844 2026] [security2:error] [pid 1211:tid 1211] [client 41.141.160.60:40742] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||kathiepontinen.com|F|2"] [data "Matched Data: SUBSTRING found within REQUEST_URI: /index.php?option=com_easystore&view=products&task=search&filter_sortby=created-ASC,EXTRACTVALUE(1,CONCAT(CHAR(126),SUBSTRING(MD5(999999999),1,28)))--+-"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "kathiepontinen.com"] [uri "/index.php"] [unique_id "at7bTYlUv0Z-bwjOZOCuOAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
