🇺🇸
TPI-Abuse
2026-08-29 04:38:52
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:37:23.970104 2026] [security2:error] [pid 32430:tid 32430] [client 104.239.88.116:35321] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/tmp.db"] [unique_id "apJiA1-320IZrFue-xAQ0QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-23 01:40:21
(1 month ago)
| Common web attack.
Web App Attack
Hacking
SQL Injection
🇨🇱
SinaiCL
2026-08-05 15:40:54
(2 months ago)
Spoofed Googlebot User-Agent - web scraping
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-29 19:08:03
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:07:51.454716 2025] [security2:error] [pid 22839:tid 22974] [client 104.239.88.116:51847] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kettlehill.kettlehill.com|F|2"] [data ".cs"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.kettlehill.com"] [uri "/nonauth/guestConfirm.cs"] [unique_id "aVLRh6hQT-NrkrxX7z3KFQAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
[email protected]
2025-12-29 08:03:11
(9 months ago)
Attack attempt against Interwebbi servers; *Port Scan* detected from 104.239.88.116 (CL/Chile/-). 5 ...
show more
Attack attempt against Interwebbi servers; *Port Scan* detected from 104.239.88.116 (CL/Chile/-). 5 hits in the last 170 seconds; IP: 104.239.88.116; Ports: *; Direction: 0; Trigger: PS_LIMIT;
show less
Brute-Force
🇺🇸
TPI-Abuse
2025-10-29 01:18:30
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 21:18:25.490197 2025] [security2:error] [pid 18537:tid 18537] [client 104.239.88.116:53621] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/MyErrors.log"] [unique_id "aQFrYexjyQdjexF_x9mOgwAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 15:41:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:41:05.078723 2025] [security2:error] [pid 30036:tid 30086] [client 104.239.88.116:35781] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.net|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.net"] [uri "/my.key"] [unique_id "aN1LkZ4Gg6n9TdaAp9hxAQAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-27 00:51:39
(1 year ago)
(mod_security) mod_security (id:221260) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:221260) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:51:32.502606 2025] [security2:error] [pid 404372:tid 404539] [client 104.239.88.116:52767] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||webdisk.kettlehill.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kettlehill.net"] [uri "/403.shtml"] [unique_id "aIV4FBTdKN3sxMPXSjT3dwAAAQw"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 22:27:13
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.239.88.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 18:27:06.631403 2025] [security2:error] [pid 3643289:tid 3643289] [client 104.239.88.116:50125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/css../.git/config"] [unique_id "aDjfOoiS8xn4cYSw4yYBmgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-31 18:20:03
(1 year ago)
| Shellshock attack attempt
Hacking
SQL Injection
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-05 21:33:24
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 20:29:42
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227
show less
Bad Web Bot
