2026-06-23 05:36:22
(13 hours ago)
apache vulnerability scan
Web App Attack
🇬🇧
consul.to
2026-06-22 14:19:11
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇩
Burayot
2026-06-22 08:44:55
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 43.128.88.177 (SG/Singapore/-): 2 i ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 43.128.88.177 (SG/Singapore/-): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 12:32:05
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 08:31:59.479032 2026] [security2:error] [pid 14796:tid 14796] [client 43.128.88.177:45510] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.newcastle91.org|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newcastle91.org"] [uri "/index.php"] [unique_id "ajfZvycOXq22h9QtLtA5NwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 10:28:54
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 06:28:49.555030 2026] [security2:error] [pid 19012:tid 19012] [client 43.128.88.177:40252] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.networkmediasoftware.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.networkmediasoftware.com"] [uri "/index.php"] [unique_id "aje84cVV-dxw-T0AzYroTAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 09:05:07
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:05:04.109283 2026] [security2:error] [pid 12226:tid 12241] [client 43.128.88.177:57948] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.helppeopleshare.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.helppeopleshare.net"] [uri "/index.php"] [unique_id "ajepQJDzHew-AfvaUnxekgAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 08:48:14
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 04:48:08.652774 2026] [security2:error] [pid 9115:tid 9115] [client 43.128.88.177:39796] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.help.gmacguffin.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "help.gmacguffin.com"] [uri "/index.php"] [unique_id "ajelSF07bs5TYSoP5NyAXgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-21 06:46:29
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 06:27:09
(2 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 02:27:04.903495 2026] [security2:error] [pid 23495:tid 23514] [client 43.128.88.177:38548] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.chelseyrae.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.chelseyrae.com"] [uri "/index.php"] [unique_id "ajeEOMfCzcdZMYu7RHAcuwAAAlE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
strefapi_com
2026-06-21 01:11:47
(2 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 19:04:30
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:04:23.231378 2026] [security2:error] [pid 14028:tid 14028] [client 43.128.88.177:49300] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mindheartbreath.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindheartbreath.com"] [uri "/index.php"] [unique_id "ajbkN-r0r3Jcv0sy8n9-rQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 17:08:18
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 13:08:10.404747 2026] [security2:error] [pid 30852:tid 30852] [client 43.128.88.177:51854] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||kadimasecurity.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kadimasecurity.com"] [uri "/index.php"] [unique_id "ajbI-k-wDzLFVlrnkr-nBwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-20 14:45:10
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-20 13:06:33
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 09:06:26.383709 2026] [security2:error] [pid 8461:tid 8461] [client 43.128.88.177:50572] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hawkinsenterprise.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawkinsenterprise.com"] [uri "/index.php"] [unique_id "ajaQUmcbnYDU5vl3QbjNqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 12:46:04
(3 days ago)
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 43.128.88.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 08:45:57.168712 2026] [security2:error] [pid 11562:tid 11562] [client 43.128.88.177:36906] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||hawaiivacations.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?s=index/\\x5cthink\\x5capp/invokefunction&function=call_user_func_array&vars%5B0%5D=think\\x5c__include_file&vars%5B1%5D%5B%5D=/etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hawaiivacations.com"] [uri "/index.php"] [unique_id "ajaLhSppqKdkSN5uExDoFQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack