🇺🇸
TPI-Abuse
2026-01-17 11:06:49
(5 months ago)
(mod_security) mod_security (id:240950) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:240950) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 06:06:38.013893 2026] [security2:error] [pid 2257:tid 2257] [client 192.210.191.235:36549] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||cpcalendars.nbcnewsradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/_users/org.couchdb.user:poc"] [unique_id "aWttPm3riT7M8iSywDPXkAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 19:05:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:05:25.222398 2025] [security2:error] [pid 22839:tid 22973] [client 192.210.191.235:38613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aVLQ9ahQT-NrkrxX7z3JUAAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 09:44:28
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:44:17.188134 2025] [security2:error] [pid 21846:tid 21846] [client 192.210.191.235:35641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/wp-config.php~"] [unique_id "aRWocWx35zdii1sDkPpsqQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-27 20:23:23
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:211190) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 27 16:23:05.489000 2024] [security2:error] [pid 23119:tid 23153] [client 192.210.191.235:44849] [client 192.210.191.235] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||staging.kettlehill.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/index.php"] [unique_id "ZqVXKdC5xPF3XKcxXkCk9QAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2024-07-15 19:18:03
(1 year ago)
SS1: Web Attack POST /wp-admin/admin-ajax.php?td_theme_name=Newspaper&v=11.2
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-05-08 07:00:43
(2 years ago)
Unauthorized login attempts []
Brute-Force
🇪🇸
10dencehispahard SL
2024-05-08 06:38:23
(2 years ago)
Web Attack
DDoS Attack
Brute-Force
Web App Attack
🇪🇸
10dencehispahard SL
2024-03-27 07:00:25
(2 years ago)
Unauthorized login attempts [ BI-16635]
Brute-Force
🇪🇸
10dencehispahard SL
2024-03-27 06:43:17
(2 years ago)
WP scan
Web App Attack
🇺🇸
TPI-Abuse
2024-02-13 23:56:15
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 13 18:54:53.902957 2024] [security2:error] [pid 13159:tid 46964693591808] [client 192.210.191.235:39905] [client 192.210.191.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.staging.kettlehill.com"] [uri "/api/.env"] [unique_id "ZcwBTRLdQ7ghlPWmv_jSoAAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-26 03:57:33
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 25 22:57:29.454298 2024] [security2:error] [pid 19917] [client 192.210.191.235:37393] [client 192.210.191.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.stdavids-media.com"] [uri "/wp-config.txt"] [unique_id "ZbMtqaQWb4te0ylY94UP7QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-28 23:31:57
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 192.210.191.235 (192-210-191-235-host.colocross ...
show more
(mod_security) mod_security (id:210730) triggered by 192.210.191.235 (192-210-191-235-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 28 18:30:32.383136 2023] [security2:error] [pid 31707:tid 47281321617152] [client 192.210.191.235:52713] [client 192.210.191.235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kettlehill.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/backup.sql"] [unique_id "ZWZ4GMdaEfBIjGeko2j4SAAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-11-27 12:55:04
(2 years ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-06 02:28:07
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 22:57:26
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227
show less
Bad Web Bot