2026-07-09 23:25:47
(8 hours ago)
"GET /wp-content/plugins/WordPressCore/ HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 10:48:51
(20 hours ago)
(mod_security) mod_security (id:212620) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 06:48:35.169183 2026] [security2:error] [pid 1836:tid 1836] [client 64.112.56.143:35903] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||thegoldentether.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /board/search.php?search_id=unanswered'\\x22><script>alert(68752)</script>&sid=e70e073346e3079003afcee2303c0fa8"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "thegoldentether.com"] [uri "/board/search.php"] [unique_id "ak98g47P1jw1SWNMzBbkHgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-07-09 09:14:00
(22 hours ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 08:53:27
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:53:09.042316 2026] [security2:error] [pid 17185:tid 17267] [client 64.112.56.143:37167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.adultbaja.com"] [uri "/.env.stage"] [unique_id "ak9hdZ4FaY_COxl3XlR0JwAAAZA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
OK
2026-07-09 08:47:14
(22 hours ago)
HTTP/HTTPS
Hacking
Web App Attack
🇮🇹
Progetto1
2026-07-09 08:45:05
(22 hours ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 05:06:58
(1 day ago)
(mod_security) mod_security (id:211190) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:211190) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 01:06:15.489710 2026] [security2:error] [pid 28893:tid 28893] [client 64.112.56.143:42603] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||panierduvillage.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_imagebrowser&folder=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panierduvillage.com"] [uri "/index.php"] [unique_id "ak8sR7ApdET7LOlKM9LA2wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 03:47:45
(1 day ago)
(mod_security) mod_security (id:212620) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 64.112.56.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 23:47:31.911071 2026] [security2:error] [pid 30961:tid 30961] [client 64.112.56.143:53083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||whatifandwhynot.xyz|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?u=system'\\x22><script>alert(68752)</script>&page=cookie"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "whatifandwhynot.xyz"] [uri "/index.php"] [unique_id "ak8Z07J0bycPs2ruIBxjtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-09 03:18:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
conseilgouz
2026-07-08 19:31:42
(1 day ago)
ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2017/ceremonie-du- ...
show more
ame-12 : Block return, carriage return, ... characters=>/manifestations/programme-2017/ceremonie-du-souvenir-2017?view=article&id=11:liens-partenaires&#...(')
show less
Hacking
🇺🇸
ipblock.com
2026-07-08 18:02:00
(1 day ago)
IPBlock protected site ID [4730-fr].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack