🇭🇺
btimon
2026-04-23 14:09:00
(4 months ago)
Cross.Site.Scripting
Hacking
🇺🇸
octageeks.com
2026-02-01 05:06:09
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
TCATERDSBE
2026-01-31 08:53:00
(6 months ago)
SQL Injection
SQL Injection
🇺🇸
fortypoundhead
2026-01-31 05:10:12
(6 months ago)
Banned IP Address
Hacking
Web App Attack
🇹🇼
kk_it_man
2026-01-30 21:43:02
(6 months ago)
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Script tag in URI Possible Cros ...
show more
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Script tag in URI Possible Cross Site Scripting Attempt
show less
Port Scan
🇺🇸
TPI-Abuse
2026-01-30 16:53:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 11:53:18.291019 2026] [security2:error] [pid 10374:tid 10374] [client 45.154.98.185:52030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oualierealty.com"] [uri "/.env"] [unique_id "aXzh_hvDCi6xFXYzo0QQegAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-30 13:04:45
(6 months ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-30 13:01:57
(6 months ago)
(mod_security) mod_security (id:210580) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210580) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 08:01:44.130817 2026] [security2:error] [pid 21397:tid 21397] [client 45.154.98.185:51156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:article_id. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.old.renju.net|F|2"] [data "Matched Data: etc/passwd found within ARGS:article_id: ../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.old.renju.net"] [uri "/media/showarticle.php"] [unique_id "aXyruMcqvMjtb81w2IGhrAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Jan Pokorný
2026-01-30 08:35:00
(6 months ago)
500x
SQL Injection
🇺🇸
TPI-Abuse
2026-01-30 07:12:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 45.154.98.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 02:12:14.413930 2026] [security2:error] [pid 27007:tid 27007] [client 45.154.98.185:59195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.powerkiteforum.com"] [uri "/.env"] [unique_id "aXxZzglwuUTp3Rwd-lmbUQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-01-30 05:41:08
(6 months ago)
Domain : restatec.com
Rule : DangerQueryString
2026-01-30 05:39:54 ***hidden-privacy*** GET /Imprimi ...
show more
Domain : restatec.com
Rule : DangerQueryString
2026-01-30 05:39:54 ***hidden-privacy*** GET /ImprimirArticulo.aspx pid=<script>alert('XSS')</script>
show less
Web App Attack
🇺🇸
fortypoundhead
2026-01-30 03:54:08
(6 months ago)
Banned IP Address
Hacking
Web App Attack
🇺🇸
fortypoundhead
2026-01-30 01:39:39
(6 months ago)
SQL Injection Attempt
SQL Injection
Web App Attack
🇩🇪
fleckenbase
2026-01-30 00:59:51
(6 months ago)
[Fri Jan 30 01:59:50.964981 2026] [php:notice] [pid 97915:tid 97915] [client 45.154.98.185:55834] At ...
show more
[Fri Jan 30 01:59:50.964981 2026] [php:notice] [pid 97915:tid 97915] [client 45.154.98.185:55834] Attack: type passwd from
[Fri Jan 30 01:59:51.349647 2026] [php:notice] [pid 98658:tid 98658] [client 45.154.98.185:55868] Attack: type passwd from
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-01-29 09:59:46
(6 months ago)
Cloudflare WAF: Request Path: /profile/Diabliyo/ Request Query: ?area=%27nvOpzp;%20AND%201=1%20OR%20 ...
show more
Cloudflare WAF: Request Path: /profile/Diabliyo/ Request Query: ?area=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), Host: forum.elhacker.net userAgent: Action: block Source: firewallManaged ASN Description: 028f45e8dd4f225cb46a7d8003745a3a7f55d3a0 Country: NL Method: GET Timestamp: 2026-01-29T09:59:46Z ruleId: 8166da327a614849bfa29317e7907480. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack