🇺🇸
TPI-Abuse
2026-09-01 18:25:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:25:47.623713 2026] [security2:error] [pid 405483:tid 405522] [client 161.123.130.109:58793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.com"] [uri "/.htpasswd"] [unique_id "apcYq73ujfi26wWz6vGUhwAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-08-25 15:16:08
(1 week ago)
Forbidden access for mozilla/5.0 (compatible; googlebot/2.1; +http://www.google.com/bot.html)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-01 02:32:46
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:32:43.171405 2026] [security2:error] [pid 12707:tid 12715] [client 161.123.130.109:38007] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kettlehill.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.com"] [uri "/logs/errors.log"] [unique_id "ahzvS_r1zQOtbkd9viUwfAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 07:25:20
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 02:25:14.064366 2025] [security2:error] [pid 8488:tid 8565] [client 161.123.130.109:39743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.com"] [uri "/.env.kettlehill"] [unique_id "aS1C2tZHHfu_5jcVG6pvQwAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 19:55:50
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:55:44.099243 2025] [security2:error] [pid 10446:tid 10446] [client 161.123.130.109:32963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nbcnewsradio.com"] [uri "/.svn/wc.db"] [unique_id "aQEfwCnLmtDdLj7dmrwsfQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 14:41:37
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:41:24.431058 2025] [security2:error] [pid 12475:tid 12497] [client 161.123.130.109:54295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/.env"] [unique_id "aN09lGCKjmgjI9kURFJ-1QAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
KuhA
2025-09-22 01:46:00
(11 months ago)
"POST /sse HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-08-01 06:39:10
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:211190) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:38:53.930392 2025] [security2:error] [pid 3331488:tid 3331560] [client 161.123.130.109:53805] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mail.kettlehill.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/"] [unique_id "aIxg_QesNFIDOFtp0dFmLgAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-05 12:50:03
(1 year ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 16:30:00
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 12:29:56.433273 2025] [security2:error] [pid 3031952:tid 3031952] [client 161.123.130.109:51479] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.nbcnewsradio.com"] [uri "/.htpasswd"] [unique_id "aDyABKlYyxxLgtsKlw2P_AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-01 05:40:56
(1 year ago)
(mod_security) mod_security (id:212750) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:212750) triggered by 161.123.130.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 01:40:03.741016 2025] [security2:error] [pid 2256137:tid 2256243] [client 161.123.130.109:59705] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\bon(?:abort|blur|change|click|dblclick|dragdrop|error|focus|keydown|keypress|keyup|load|mouse(?:down|move|out|over|up)|move|readystatechange|reset|resize|select|submit|unload)\\\\b[^a-zA-Z0-9_]{0,}?=" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "69"] [id "212750"] [rev "3"] [msg "COMODO WAF: XSS Attack Detected||mail.kettlehill.com|F|2"] [data "Matched Data: onerror= found within REQUEST_URI: /?spai_vjs=</script><img src=1 onerror=alert(document.domain)>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mail.kettlehill.com"] [uri "/"] [unique_id "aDvns2Q8Dui5hvebpq9w8gAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2023-07-24 18:45:51
(3 years ago)
(From [email protected] ) Hi,
Would you be open to do an interview?
We are in ...
show more
(From [email protected] ) Hi,
Would you be open to do an interview?
We are interviewing business owners like you and give them the chance to share their story.
Would you like more information on how this works?
If Yes, please contact this email: [email protected]
We are looking forward to hear from you
Best,
Donna Kley
show less
Phishing
Web Spam