🇺🇸
TPI-Abuse
2026-01-16 16:07:07
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 11:07:00.863300 2026] [security2:error] [pid 5212:tid 5212] [client 161.123.130.10:43551] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/\\\\windows/win.ini"] [unique_id "aWpiJFuiLBGsiNOtcQkDIAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 19:11:46
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:11:26.875490 2025] [security2:error] [pid 22842:tid 23000] [client 161.123.130.10:52615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.net"] [uri "/.git/config"] [unique_id "aVLSXlKoonkfA7MmLZcctgAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 07:57:32
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 02:57:27.040329 2025] [security2:error] [pid 7462:tid 7462] [client 161.123.130.10:41865] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/errors/errors.log"] [unique_id "aRQ958ZoEkP1jY3Wne2N_AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-06 01:28:28
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 21:28:22.990389 2025] [security2:error] [pid 30054:tid 30054] [client 161.123.130.10:38895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nbcnewsradio.com"] [uri "/example.htaccess"] [unique_id "aJKvtq9kon8N-41qQJXBIgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-27 01:04:27
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:04:24.193187 2025] [security2:error] [pid 404369:tid 404484] [client 161.123.130.10:60179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php"] [unique_id "aIV7GI1ApCwrT9-Kn8Wy4gAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
PulseServers
2025-05-29 21:27:42
(1 year ago)
Probing a honeypot for vulnerabilities. Ignored robots.txt - US10 Honeypot
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 21:13:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 17:13:54.867600 2025] [security2:error] [pid 3527532:tid 3527532] [client 161.123.130.10:53891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/.env.example"] [unique_id "aDjOEvBwSPSp2Cvs1ytMMAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-24 18:40:14
(1 year ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-06 03:59:21
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 23:52:15
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇦🇺
oncord
2023-09-01 01:19:58
(2 years ago)
Form spam
Web Spam
🇨🇳
ThreatBook.io
2023-01-11 22:14:45
(3 years ago)
2023-01-11 20:06:22 /wp-json/wp/v2/users
2023-01-11 20:06:24 /wp-json/wp/v2/users
Web App Attack