🇺🇸
TPI-Abuse
2026-06-01 02:27:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:27:15.231948 2026] [security2:error] [pid 7732:tid 7749] [client 191.96.117.165:43871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.kettlehill.com"] [uri "/sample.htaccess"] [unique_id "ahzuAyKq_i-FrRbJEDIEsAAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-21 08:30:04
(3 months ago)
| A web attack returned code 200 (success).
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-02-01 11:44:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:44:13.006647 2026] [security2:error] [pid 483:tid 662] [client 191.96.117.165:36439] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/wp-config.php-backup"] [unique_id "aX88jQMxl-cQ0UzvOvSIdAAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 07:29:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 02:29:33.342998 2026] [security2:error] [pid 12126:tid 12126] [client 191.96.117.165:34535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.git/config"] [unique_id "aWno3fRDqLzXevjeQOMxVAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Kurtbaby
2025-12-30 16:51:00
(5 months ago)
Part of a coordinated attack from many different source IPs that targeted our company's VPN Christma ...
show more
Part of a coordinated attack from many different source IPs that targeted our company's VPN Christmas Eve through the end of the 26th.
show less
Hacking
🇺🇸
TPI-Abuse
2025-12-01 06:10:58
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 01:10:53.435976 2025] [security2:error] [pid 8488:tid 8559] [client 191.96.117.165:44635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.net"] [uri "/_.htaccess"] [unique_id "aS0xbdZHHfu_5jcVG6pjGAAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 16:02:50
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 11:02:45.802269 2025] [security2:error] [pid 31117:tid 31117] [client 191.96.117.165:36057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nbcnewsradio.com"] [uri "/.htpasswd"] [unique_id "aRSvpeYFlZtbgnfH9p6h8gAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 16:30:48
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.96.117.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:30:40.409751 2025] [security2:error] [pid 30111:tid 30189] [client 191.96.117.165:57893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kettlehill.com"] [uri "/.env.live"] [unique_id "aN1XMBH4YjaIRtXIcLCXIgAAAhM"]
show less
Brute-Force
Bad Web Bot
Web App Attack