🇺🇸
TPI-Abuse
2026-01-27 04:19:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 23:19:24.849011 2026] [security2:error] [pid 8283:tid 8295] [client 173.0.9.250:43351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.kettlehill.com"] [uri "/.env"] [unique_id "aXg8zLxpdM2qN_Nxpu9uwQAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Alejandro Docasar
2024-11-28 11:58:43
(1 year ago)
Web App Attack
🇩🇪
ps-center
2024-11-27 10:47:09
(1 year ago)
SS1: Web Attack GET /wp-config.php.bak
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇩🇪
dayda.net
2024-11-22 04:07:07
(1 year ago)
piereg_logout_url=true&redirect_to=https://example.com
Bad Web Bot
🇺🇸
TPI-Abuse
2024-10-27 02:34:00
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211190) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 26 22:32:54.638628 2024] [security2:error] [pid 13008:tid 13119] [client 173.0.9.250:54599] [client 173.0.9.250] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||kettlehill.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_jeformcr&view=../../../../../../../../etc/passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/index.php"] [unique_id "Zx2mVp3t9n-ZbyO007yqCwAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-03 18:42:03
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 14:40:14.652121 2024] [security2:error] [pid 11127:tid 11127] [client 173.0.9.250:55579] [client 173.0.9.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stdavids-media.com"] [uri "/images../.git/config"] [unique_id "ZtdYDl4M0ACjnPeZ1C01CQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-01 00:43:43
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211190) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 31 20:43:18.654994 2024] [security2:error] [pid 27402:tid 27418] [client 173.0.9.250:56921] [client 173.0.9.250] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.kettlehill.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_cmimarketplace&Itemid=70&viewit=/../../../../../../etc/passwd&cid=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.net"] [uri "/index.php"] [unique_id "ZqraJgwzJqHzsBLvMCVqIQAAAco"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-07-16 09:00:08
(1 year ago)
General scanning observed in manual log review.
Web App Attack
🇩🇪
ps-center
2024-07-16 00:39:11
(1 year ago)
SS1: Web Attack GET /wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../../ ...
show more
SS1: Web Attack GET /wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../../../../../../etc/passwd
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-06-29 04:03:31
(1 year ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇺🇸
TPI-Abuse
2024-05-21 23:18:22
(2 years ago)
(mod_security) mod_security (id:212790) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:212790) triggered by 173.0.9.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 21 19:17:43.474003 2024] [security2:error] [pid 16874:tid 47525635036928] [client 173.0.9.250:50559] [client 173.0.9.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "[\\\\s\\\\x22'](?:alert|eval|\\\\.fromcharcode)\\\\s?(?:\\\\(|`)" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "72"] [id "212790"] [rev "5"] [msg "COMODO WAF: XSS Attack Detected||www.kettlehill.com|F|2"] [data "Matched Data: 'alert( found within REQUEST_URI: /dashboard/snapshot/{{constructor.constructor('alert(document.domain)')()}}?orgid=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.kettlehill.com"] [uri "/dashboard/snapshot/{{constructor.constructor('alert(document.domain)')()}}"] [unique_id "Zk0rlzUlwAU9Ny4dLf_hOgAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-05-08 07:00:43
(2 years ago)
Unauthorized login attempts []
Brute-Force
🇪🇸
10dencehispahard SL
2024-05-08 06:34:28
(2 years ago)
Web Attack
DDoS Attack
Brute-Force
Web App Attack
2024-04-16 00:17:02
(2 years ago)
Common attack or app scan event detected and blocked
Port Scan
Hacking
Web App Attack
🇪🇸
10dencehispahard SL
2024-03-27 07:00:25
(2 years ago)
Unauthorized login attempts [ BI-16635]
Brute-Force