🇺🇸
TPI-Abuse
2026-07-02 04:02:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 00:01:52.849016 2026] [security2:error] [pid 24244:tid 24289] [client 104.233.12.48:45637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/.htaccess"] [unique_id "akXisMVqafY74aTf9-BNxgAAAlc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 23:33:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 18:33:44.843955 2026] [security2:error] [pid 23841:tid 23841] [client 104.233.12.48:45437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/.env"] [unique_id "aWrK2I2LET7408OyC6Z9rgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 22:11:41
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:11:38.090272 2025] [security2:error] [pid 17973:tid 17973] [client 104.233.12.48:34559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.farmers123.com"] [uri "/.env.bak"] [unique_id "aS9kGqeeMsIq1otsIeu0bgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
Erpelstolz
2025-11-25 12:52:15
(7 months ago)
VM 131: 104.233.12.48 - - [25/Nov/2025:13:52:04 +0100] "GET /....%5c....%5c....%5c....%5c....%5c.... ...
show more
VM 131: 104.233.12.48 - - [25/Nov/2025:13:52:04 +0100] "GET /....%5c....%5c....%5c....%5c....%5c....%5c....%5c....%5c....%5cwindows%5cwin.ini HTTP/1.1" 301 811
show less
Web App Attack
2025-11-17 11:16:01
(8 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 10:45:33
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 05:45:27.156879 2025] [security2:error] [pid 24820:tid 24820] [client 104.233.12.48:55215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/.env.stage"] [unique_id "aRRlR4la9-OjXW5sjYotPgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 14:41:10
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:40:59.127429 2025] [security2:error] [pid 31612:tid 31744] [client 104.233.12.48:40083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/.svn/entries"] [unique_id "aN09e_VYIT9TWn2lWzJoRQAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
raramos
2025-08-07 19:00:07
(11 months ago)
[SMB remote code execution attempt: port tcp/445]
in blocklist.de:'listed [pop3]'
in SpamCop:'listed ...
show more
[SMB remote code execution attempt: port tcp/445]
in blocklist.de:'listed [pop3]'
in SpamCop:'listed'
in sorbs:'listed [web], [spam]'
in Unsubscore:'listed'
*(RWIN=8192)(04:10)
show less
Web Spam
Email Spam
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 06:39:51
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:39:44.967014 2025] [security2:error] [pid 3331447:tid 3331455] [client 104.233.12.48:35117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/wp-config.old"] [unique_id "aIxhMFSZjg6lcpTf51ZVawAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 16:00:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 12:00:00.333543 2025] [security2:error] [pid 3001095:tid 3001095] [client 104.233.12.48:50261] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.nbcnewsradio.com|F|2"] [data ".nbcnewsradio.com.key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/mail.nbcnewsradio.com.key"] [unique_id "aDx5ALBNjduxiLqzMlDOjwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 08:01:31
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 104.233.12.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 04:01:22.878381 2025] [security2:error] [pid 2762044:tid 2762054] [client 104.233.12.48:33983] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kettlehill.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/windows/win.ini"] [unique_id "aDwI0glM7g4oxUkvwMwafQAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2023-07-24 14:37:43
(2 years ago)
(From [email protected] ) Hi,
Would you be open to do an interview?
We are in ...
show more
(From [email protected] ) Hi,
Would you be open to do an interview?
We are interviewing business owners like you and give them the chance to share their story.
Would you like more information on how this works?
If Yes, please contact this email: [email protected]
We are looking forward to hear from you
Best,
Donna Kley
show less
Phishing
Web Spam