🇩🇪
C C
2026-02-27 07:06:22
(3 months ago)
Recurrent distributed campaign detected (51 requests, 51 unique IPs over 63857 sec); unauth. bot tra ...
show more
Recurrent distributed campaign detected (51 requests, 51 unique IPs over 63857 sec); unauth. bot traffic w/o verification; first observed at 2026-02-26T18:00:52+01:00
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 05:35:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 00:35:51.961633 2026] [security2:error] [pid 27875:tid 27875] [client 31.57.82.210:57709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/_.htaccess"] [unique_id "aWsft23vsO0J1xfBTsGKUAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 17:33:29
(5 months ago)
(mod_security) mod_security (id:217200) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217200) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:32:53.447703 2025] [security2:error] [pid 27837:tid 28070] [client 31.57.82.210:59535] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||cpcalendars.kettlehill.com|F|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "cpcalendars.kettlehill.com"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aVK7RVTnFBsA92hvAN5W6wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-14 22:52:00
(8 months ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2025-07-27 00:33:54
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:33:50.184608 2025] [security2:error] [pid 172228:tid 172412] [client 31.57.82.210:34693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.net"] [uri "/content../.git/config"] [unique_id "aIVz7uyxIbVHpqlXWTqUgwAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-29 17:08:24
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 13:08:18.456346 2025] [security2:error] [pid 3041635:tid 3041635] [client 31.57.82.210:51197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.farmers123.com"] [uri "/wp-config.php-backup"] [unique_id "aDiUgpH9X1lhTOP1mKa7XAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-04 14:30:04
(1 year ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
2025-03-07 05:34:29
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-03-06 23:01:50
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-03-05 07:40:52
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-02-26 16:49:25
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-02-22 12:40:50
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-02-20 16:24:43
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-02-19 07:41:24
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-02-11 06:55:59
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot