🇨🇿
ptlab
2026-07-11 20:45:26
(7 hours ago)
Detected phpmyadmin attack from WP-host.
Hacking
Web App Attack
🇫🇷
conseilgouz
2026-07-11 19:02:26
(9 hours ago)
upe-12 : Block return, carriage return, ... characters=>/media/system/js/keepalive.min.js?08e025=%25 ...
show more
upe-12 : Block return, carriage return, ... characters=>/media/system/js/keepalive.min.js?08e025=%253Csvg%2520onload%253Dalert%2528qsxss9k7z%2529%253E(%)
show less
Hacking
🇫🇷
conseilgouz
2026-07-11 17:22:14
(11 hours ago)
loe-7 : Trying access unauthorized files/dir=>/wp-content/plugins/pwnd/pwnd.php
Hacking
🇩🇪
louis77
2026-07-11 17:06:45
(11 hours ago)
Sensitive file access attempt - Path: /.env.backup, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel M ...
show more
Sensitive file access attempt - Path: /.env.backup, Method: GET, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-11 12:07:46
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:07:32.910957 2026] [security2:error] [pid 5261:tid 5261] [client 64.112.56.33:46991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aupapierjaponais.com"] [uri "/.env.local"] [unique_id "alIyBDs8kwh4l9XCy4zHZwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
OK
2026-07-11 11:53:04
(16 hours ago)
HTTP/HTTPS
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 11:13:35
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 07:13:17.584977 2026] [security2:error] [pid 18883:tid 18910] [client 64.112.56.33:37659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seips.org"] [uri "/.env.production"] [unique_id "alIlTdXPWxq3AK8uym1bFwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-10 16:30:01
(1 day ago)
[10/Jul/2026:19:10:32 +0300] 178369983294.785175 64.112.56.33 40567 148.251.76.218 443
[10/Jul/2026: ...
show more
[10/Jul/2026:19:10:32 +0300] 178369983294.785175 64.112.56.33 40567 148.251.76.218 443
[10/Jul/2026:19:29:59 +0300] 178370099959.592823 64.112.56.33 47337 148.251.76.218 443
show less
Web App Attack
🇫🇷
France Artisanat
2026-07-10 16:29:46
(1 day ago)
test
Web Spam
🇺🇸
ipblock.com
2026-07-10 11:50:00
(1 day ago)
IPBlock protected site ID [4055-d][s=06].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
2026-07-10 08:05:00
(1 day ago)
Brute-Force
Web App Attack
SSH
Hacking
🇫🇷
mikekarl
2026-07-10 06:47:13
(1 day ago)
SQL INJECTION test''
SQL Injection
🇺🇸
TPI-Abuse
2026-07-10 04:55:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 00:54:46.480203 2026] [security2:error] [pid 2143136:tid 2143136] [client 64.112.56.33:54591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3905ccn.org"] [uri "/.env.dev.local"] [unique_id "alB7Fr3r9l7i29TTSg-R1AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 00:04:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 20:04:17.682049 2026] [security2:error] [pid 20532:tid 20532] [client 64.112.56.33:48661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegoldentether.com"] [uri "/.env.dev"] [unique_id "alA3ARvKcGJ9orCij2sgNQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 22:23:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.112.56.33 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 18:22:40.468375 2026] [security2:error] [pid 689:tid 689] [client 64.112.56.33:58465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiyaplatform.com"] [uri "/.env.dev"] [unique_id "alAfMHuIReYImAO2QnONTwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack