2025-11-17 12:13:55
(10 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking
SQL Injection
Web App Attack
🇨🇦
JuicyJ
2025-11-17 11:42:13
(10 months ago)
Trying to look for places to exploit
Web Spam
🇺🇸
masterguru
2025-11-12 13:23:23
(11 months ago)
newreply.php request blocked, no referer. Pattern match "newreply.php" at REQUEST_URI. (45030-124)
Hacking
🇫🇷
mikekarl
2025-11-10 16:36:10
(11 months ago)
Empty or bad user-agent.
Bad Web Bot
🇺🇸
masterguru
2025-11-10 05:40:16
(11 months ago)
. Matched phrase "/.env" at REQUEST_URI. (210492-124)
Web App Attack
🇬🇧
Aetherweb Ark
2025-11-10 05:38:02
(11 months ago)
(mod_security) mod_security (id:949110) triggered by 5.189.158.111 (FR/France/vmi2885659.contaboserv ...
show more
(mod_security) mod_security (id:949110) triggered by 5.189.158.111 (FR/France/vmi2885659.contaboserver.net): N in the last X secs
show less
Web App Attack
🇬🇧
AvonleaConsulting
2025-11-06 23:58:44
(11 months ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2025-11-06 21:13:01
(11 months ago)
Unrecognised attack
IoT Targeted
🇪🇪
mex
2025-11-06 21:08:34
(11 months ago)
SQL-Injection
SQL Injection
🇮🇪
abassolsa
2025-11-06 09:16:59
(11 months ago)
5.189.158.111 - - [06/Nov/2025:09:16:58 +0000] "GET /sites/default/files/re_pool/NB0114152ENN_002.pd ...
show more
5.189.158.111 - - [06/Nov/2025:09:16:58 +0000] "GET /sites/default/files/re_pool/NB0114152ENN_002.pdf HTTP/1.1" 404 43936 "-" "Mozilla/5.0 (Linux; Android 9; ASUS_I005DA Build/PI; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/133.0.6943.122 Mobile"
5.189.158.111 - - [06/Nov/2025:09:16:59 +0000] "GET /sites/default/files/re_pool/NB0114152ENN_002.pdf HTTP/1.1" 404 43935 "-" "Mozilla/5.0 (Linux; Android 9; ASUS_I005DA Build/PI; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/133.0.6943.122 Mobile"
...
show less
Brute-Force
Bad Web Bot
SSH
🇫🇷
Sklurk
2025-11-06 03:00:20
(11 months ago)
Web App Attack
Web App Attack
🇺🇸
masterguru
2025-11-04 06:48:33
(11 months ago)
COMODO WAF: OS File Access Attempt. Matched phrase "etc/passwd" at ARGS:322481-What-exactly-is-Cento ...
show more
COMODO WAF: OS File Access Attempt. Matched phrase "etc/passwd" at ARGS:322481-What-exactly-is-Centos-Stream. (210580-124)
show less
Hacking
🇫🇷
conseilgouz
2025-11-04 01:28:49
(11 months ago)
upe-12 : Block return, carriage return, ... characters=>/index.php?catid=8&id=219&option=com ...
show more
upe-12 : Block return, carriage return, ... characters=>/index.php?catid=8&id=219&option=com_content&option=%27&view=article(')
show less
Hacking
🇺🇸
TPI-Abuse
2025-11-03 18:14:43
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 5.189.158.111 (vmi2885659.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210350) triggered by 5.189.158.111 (vmi2885659.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 13:14:37.515230 2025] [security2:error] [pid 31844:tid 31857] [client 5.189.158.111:51376] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seips.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seips.org"] [uri "/newuser.php"] [unique_id "aQjxDVETzmSeuM0YdhqH-wAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-03 17:51:47
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 5.189.158.111 (vmi2885659.contaboserver.net): 1 ...
show more
(mod_security) mod_security (id:210350) triggered by 5.189.158.111 (vmi2885659.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 12:51:40.756959 2025] [security2:error] [pid 3960:tid 3960] [client 5.189.158.111:57918] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fiyaplatform.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fiyaplatform.com"] [uri "/fiyacore/music.php"] [unique_id "aQjrrCYiLJyV-JbM6N6X2QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack