|
Anonymous
|
|
| SQL injection attempt.
|
Web App Attack
Hacking
SQL Injection
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:33:02.540505 2026] [security2:error] [pid 16722:tid 16909] [client 31.56.137.228:53303] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/.git/config"] [unique_id "aX857syMbG6v0xSDvGJd1wAAAtc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 00:48:05.491912 2025] [security2:error] [pid 26090:tid 26448] [client 31.56.137.228:36863] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.kettlehill.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.kettlehill.net"] [uri "/sql.sql"] [unique_id "aS0sFQqR0geke5MRGl4DswAAAII"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 21:11:50.699822 2025] [security2:error] [pid 9837:tid 9837] [client 31.56.137.228:55899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.nbcnewsradio.com"] [uri "/.svn/entries"] [unique_id "aQFp1qcp24xTE3xLTz_xvAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
exxos
|
|
Attacks with Bad user agents
|
Hacking
|
|
|
🇺🇸
sailor
|
|
blocked by firewall for XSS: Cross Site Scripting in query string:
|
Hacking
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:12:59.977223 2025] [security2:error] [pid 30111:tid 30181] [client 31.56.137.228:41411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kettlehill.net"] [uri "/.env.dev"] [unique_id "aN1TCxH4YjaIRtXIcLCPQwAAAgs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇯🇵
KuhA
|
|
"GET /_.htaccess HTTP/1.1"
|
Hacking
Web App Attack
|
|
|
🇪🇸
10dencehispahard SL
|
|
WP probing for vulnerabilities
|
Hacking
Exploited Host
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:220150) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:220150) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 02:38:11.134303 2025] [security2:error] [pid 3331447:tid 3331453] [client 31.56.137.228:40043] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:union(?:\\\\/\\\\*.{0,399}\\\\*\\\\/)?select)" at ARGS:s. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5662"] [id "220150"] [rev "5"] [msg "COMODO WAF: SQL injection vulnerability in Ginkgo CMS 5.0 (CVE-2013-5318)||www.kettlehill.com|F|2"] [data "9999')unionselect111,222,(select(concat(0x44617461626173653a20,database()))),4444,5---"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kettlehill.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aIxg01SZjg6lcpTf51ZSggAAAYI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 31.56.137.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 19:32:10.390402 2025] [security2:error] [pid 817130:tid 817130] [client 31.56.137.228:52789] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.nbcnewsradio.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/.../.../.../.../.../.../.../.../.../windows/win.ini"] [unique_id "aDo_-vEvJl4TiLyVT6m0XAAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|