๐บ๐ธ
TPI-Abuse
2026-06-01 03:02:26
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 23:02:22.572248 2026] [security2:error] [pid 12707:tid 12718] [client 136.0.182.250:49259] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.staging.kettlehill.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.staging.kettlehill.com"] [uri "/admin/error.log"] [unique_id "ahz2Pvr1zQOtbkd9viU4UwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-02 22:03:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:03:41.314572 2025] [security2:error] [pid 7557:tid 7557] [client 136.0.182.250:42567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.farmers123.com"] [uri "/example.htaccess"] [unique_id "aS9iPS-DvuXZJKJBLaCA_gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-12-01 06:12:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:12:19.462296 2025] [security2:error] [pid 8488:tid 8576] [client 136.0.182.250:52393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.kettlehill.com"] [uri "/.env.live"] [unique_id "aS0xw9ZHHfu_5jcVG6pjaAAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-28 23:41:54
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:41:47.046003 2025] [security2:error] [pid 27259:tid 27259] [client 136.0.182.250:60165] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nbcnewsradio.com"] [uri "/logs/errors.log"] [unique_id "aQFUu-4aMhbwtCB_f8s-FgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-10-01 15:03:32
(8 months ago)
(mod_security) mod_security (id:212750) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:212750) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:03:23.968366 2025] [security2:error] [pid 31612:tid 31747] [client 136.0.182.250:47547] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort|blur|change|click|dblclick|dragdrop|error|focus|keydown|keypress|keyup|load|mouse(?:down|move|out|over|up)|move|readystatechange|reset|resize|select|submit|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||kettlehill.com|F|2"] [data "Matched Data: onerror= found within REQUEST_URI: /?s=<img src=x onerror=alert(123);>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "kettlehill.com"] [uri "/"] [unique_id "aN1Cu_VYIT9TWn2lWzJqSQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-09-22 23:01:36
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 19:01:31.632645 2025] [security2:error] [pid 28305:tid 28305] [client 136.0.182.250:35573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deandobkin.com"] [uri "/wp-config.php.bak"] [unique_id "aNHVS4SCGMw8NbcSqZleOwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-08-01 06:41:19
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210492) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:41:14.704866 2025] [security2:error] [pid 3331491:tid 3331518] [client 136.0.182.250:60081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.net"] [uri "/wp-config.php.bak"] [unique_id "aIxhilQiAcb55uv05QouSwAAAkA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-07-01 14:20:04
(11 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-06-01 06:49:15
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 02:49:09.621719 2025] [security2:error] [pid 2636838:tid 2636911] [client 136.0.182.250:44333] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.kettlehill.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/site.sql"] [unique_id "aDv35Tvwu3ccjH5oiKEXHAAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-05-30 22:02:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter. ...
show more
(mod_security) mod_security (id:210730) triggered by 136.0.182.250 (136-0-182-250.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 18:02:01.002966 2025] [security2:error] [pid 743856:tid 743856] [client 136.0.182.250:46975] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.nbcnewsradio.com"] [uri "/errors/errors.log"] [unique_id "aDoq2AZNxBWgHY8OX0n-_QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack