🇺🇸
TPI-Abuse
2026-01-18 00:05:04
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 19:04:57.745408 2026] [security2:error] [pid 761:tid 761] [client 198.105.111.161:54353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/wp-content/plugins/wpsite-background-takeover/exports/download.php"] [unique_id "aWwjqVv9JrcialPL2xEZlgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 17:50:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:50:28.269774 2025] [security2:error] [pid 30292:tid 30587] [client 198.105.111.161:55281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kettlehill.net"] [uri "/assets../.git/config"] [unique_id "aVK_ZIGwzh_8AlcRvOiGEgAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 09:27:44
(7 months ago)
(mod_security) mod_security (id:211190) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:211190) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:27:38.132984 2025] [security2:error] [pid 7831:tid 7831] [client 198.105.111.161:46463] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||ftp.nbcnewsradio.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /downloader.php?file=../../../../../../../../../../../../../etc/passwd%00.jpg"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/downloader.php"] [unique_id "aRWkig3mgPV-FN77ltx4aAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-27 00:13:36
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:13:18.738642 2025] [security2:error] [pid 172224:tid 172365] [client 198.105.111.161:53393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kettlehill.net"] [uri "/_.htaccess"] [unique_id "aIVvHvsl9f9qGESiG9bMIgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-22 06:03:25
(11 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2025-06-22 21:25:14
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-05-29 21:16:50
(1 year ago)
(mod_security) mod_security (id:221260) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:221260) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 17:16:41.778892 2025] [security2:error] [pid 3527400:tid 3527400] [client 198.105.111.161:49183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||autodiscover.farmers123.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/"] [unique_id "aDjOubtSQ4Gd6ak7ztRzjAAAABg"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-31 20:50:04
(1 year ago)
| Shellshock attack attempt
Hacking
SQL Injection
Web App Attack
🇺🇸
nowyouknow
2024-08-30 08:13:48
(1 year ago)
(From [email protected] ) As you've received this message, we can submit your message to millions ...
show more
(From [email protected] ) As you've received this message, we can submit your message to millions of website owners successfully.
Unleash the power of bulk contact form submissions with our solutions. Reach millions of website owners daily and experience instant results. We can submit up to 1 million messages per day, driving:
+ Targeted Visitors
+ Qualified Leads
+ New Clients
+ Increased Purchases
Make use of our service now! Starting from $9.
* * Visit: https://bit.ly/blastcforms
If you want to unsubscribe from this list and all future emails, please submit your website address at https://bit.ly/unsubscrme
8 Wigley Street, Melrose Park, SA, Australia, 5039
show less
Phishing
Web Spam
🇮🇩
[email protected]
2024-08-24 10:11:27
(1 year ago)
Multiple attempts to find pages that do not exist on website.
Web App Attack
🇸🇬
oncord
2024-08-22 16:32:27
(1 year ago)
Form spam
Web Spam
🇮🇩
[email protected]
2024-08-22 08:40:23
(1 year ago)
Multiple attempts to find pages that do not exist on website.
Web App Attack
🇺🇸
TPI-Abuse
2024-06-04 06:37:22
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 198.105.111.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 02:37:15.799785 2024] [security2:error] [pid 22981] [client 198.105.111.161:50271] [client 198.105.111.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ftp.pharmasalesconnect.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ftp.pharmasalesconnect.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl62G5vq5WSEbKw97lYLhwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-06 00:07:25
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-31 01:07:19
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot