🇺🇸
TPI-Abuse
2026-11-14 12:46:56
UTC ·
(5 minutes ago)
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:46:53.248950 2026] [security2:error] [pid 23198:tid 23198] [client 87.192.40.102:54937] M ...
show more
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:46:53.248950 2026] [security2:error] [pid 23198:tid 23198] [client 87.192.40.102:54937] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/configuration.php" at ARGS:csv. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||atticlodgeoutdoorlearningcenter.com|F|2"] [data "Matched Data: /configuration.php found within ARGS:csv: ../../../configuration.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "atticlodgeoutdoorlearningcenter.com"] [uri "/index.php"] [unique_id "avhYPcpyxbcXrw9EpaU_mwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-14 12:41:25
UTC ·
(11 minutes ago)
Excessive multi-domain requests
Brute-Force
🇸🇪
peterh
2026-11-14 07:38:00
UTC ·
(5 hours ago)
Web App Attack
Phishing
Hacking
🇲🇾
Rizzy
2026-11-14 05:34:17
UTC ·
(7 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
David Koswari
2026-11-14 05:18:00
UTC ·
(7 hours ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇬🇧
consul.to
2026-11-14 04:14:49
UTC ·
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:49:44
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:49:40.363788 2026] [security2:error] [pid 22565:tid 22565] [client 87.192.40.102:52112] M ...
show more
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:49:40.363788 2026] [security2:error] [pid 22565:tid 22565] [client 87.192.40.102:52112] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/configuration.php" at ARGS:csv. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||med-engineering.com|F|2"] [data "Matched Data: /configuration.php found within ARGS:csv: ../../../configuration.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "med-engineering.com"] [uri "/index.php"] [unique_id "avfaVKD9e1aw21RK3KeaFgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇰
sbk97 (https://sayor.net)
2026-11-14 02:30:08
UTC ·
(10 hours ago)
SAYOR honeypot: observed attack /wp-content/plugins/6storage-rentals/readme.txt
Brute-Force
🇺🇸
TPI-Abuse
2026-11-14 02:06:33
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:06:27.702444 2026] [security2:error] [pid 5139:tid 5139] [client 87.192.40.102:61571] Mod ...
show more
(mod_security) mod_security (id:210580) triggered by 87.192.40.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:06:27.702444 2026] [security2:error] [pid 5139:tid 5139] [client 87.192.40.102:61571] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/configuration.php" at ARGS:csv. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||salinabible.org|F|2"] [data "Matched Data: /configuration.php found within ARGS:csv: ../../../configuration.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "salinabible.org"] [uri "/index.php"] [unique_id "avfCI_rXHQEK_jTrMRoGAwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-14 02:05:34
UTC ·
(10 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
conseilgouz
2026-11-14 02:02:49
UTC ·
(10 hours ago)
hae-7 : Trying access unauthorized files/dir=>/index.php?option=com_ajax&format=raw&plugin=nrframework&task=include&path=plugins%2Fsystem%2Fnrframework%2Ffields%2F&file=nrchainedfields&class=JFormFieldChainedFields&data_so ...
show more
hae-7 : Trying access unauthorized files/dir=>/index.php?option=com_ajax&format=raw&plugin=nrframework&task=include&path=plugins%2Fsystem%2Fnrframework%2Ffields%2F&file=nrchainedfields&class=JFormFieldChainedFields&data_source=file&csv=..%2F..%2F..%2Fconfiguration.php&select_id=nr_probe&value=%5B%22%2A%22...
show less
Hacking
🇳🇱
e.fierstra
2026-11-13 22:30:47
UTC ·
(14 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-11-13 21:06:34
UTC ·
(15 hours ago)
[ns41.kdns.gr] httpd-cms-exploit: sites=www.sostis.gr; logs=/var/log/httpd/domains/sostis.gr.log; samples=/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon | /index.php?option=com_jce&task=profiles.import
Hacking
Web App Attack
🇳🇱
Roderic
2026-11-13 20:55:14
UTC ·
(15 hours ago)
Insights: an attack on a known hole (jce_profiles-import) on absolutbikes.de: /index.php?option=com_jce&task=profiles.import
Web App Attack
🇩🇪
FD-IX
2026-11-13 20:53:45
UTC ·
(15 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
