🇫🇷
bigorre.org
2026-05-31 03:45:01
(1 week ago)
Excessive crawling : exceed crawl-delay defined in robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-17 07:12:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 02:12:10.809035 2026] [security2:error] [pid 7758:tid 7758] [client 31.57.82.95:40257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/media../.git/config"] [unique_id "aWs2ShmY07iiG4nVwdRJ6wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 18:55:56
(5 months ago)
(mod_security) mod_security (id:217200) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:217200) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 13:55:47.346976 2025] [security2:error] [pid 22841:tid 23025] [client 31.57.82.95:59387] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||webdisk.kettlehill.net|F|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "webdisk.kettlehill.net"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aVLOs7vqJPp5jxktaSGC6QAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 00:01:02
(6 months ago)
(mod_security) mod_security (id:221260) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:221260) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 19:00:53.495206 2025] [security2:error] [pid 29839:tid 29912] [client 31.57.82.95:44783] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||mail.kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.com"] [uri "/debug.cgi"] [unique_id "aSjmNe4ynKOfAwqOI1o9KAAAAQU"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 09:06:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:05:27.153205 2025] [security2:error] [pid 29007:tid 29007] [client 31.57.82.95:38885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/img../.git/config"] [unique_id "aRWfV5X1-wttVwisv_XAEwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-14 22:43:00
(8 months ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2025-07-27 00:57:14
(10 months ago)
(mod_security) mod_security (id:211070) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211070) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:57:11.142178 2025] [security2:error] [pid 404370:tid 404573] [client 31.57.82.95:57779] ModSecurity: Access denied with code 403 (phase 1). Pattern match "," at REQUEST_HEADERS:Transfer-Encoding. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "38"] [id "211070"] [rev "1"] [msg "COMODO WAF: HTTP Request Smuggling Attack.||staging.kettlehill.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "staging.kettlehill.com"] [uri "/tmui/login.jsp"] [unique_id "aIV5Z8y-cZtwxEkIWL85eQAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-30 01:41:19
(1 year ago)
(mod_security) mod_security (id:226830) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:226830) triggered by 31.57.82.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 21:41:14.160776 2025] [security2:error] [pid 3928931:tid 3928931] [client 31.57.82.95:54331] ModSecurity: Access denied with code 403 (phase 1). Operator GE matched 1 at ARGS_GET. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6392"] [id "226830"] [rev "2"] [msg "COMODO WAF: Open redirect vulnerability in the Redirect function in the StageShow plugin before 5.0.9 for WordPress (CVE-2015-5461)||cpcontacts.farmers123.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "cpcontacts.farmers123.com"] [uri "/wp-content/plugins/stageshow/stageshow_redirect.php"] [unique_id "aDkMup7YD0fx8fcAOIfiOwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-03-15 04:21:58
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-03-09 00:29:22
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-03-01 20:26:31
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-02-27 17:00:13
(1 year ago)
| Shellshock attack detected
Hacking
SQL Injection
Web App Attack
2025-02-23 09:16:33
(1 year ago)
Illegal actions on webapp
Hacking
Web App Attack
2025-02-22 12:54:00
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot
2025-02-19 07:01:18
(1 year ago)
ignores robots.txt
Bad Web Bot