🇺🇸
TPI-Abuse
2026-11-13 17:12:15
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:12:06.816679 2026] [security2:error] [pid 21028:tid 21028] [client 31.58.32.49:34255] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:12:06.816679 2026] [security2:error] [pid 21028:tid 21028] [client 31.58.32.49:34255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nbcnewsradio.com"] [uri "/.env.www"] [unique_id "avdE5ueMhHsN_HfFPvch6AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-10-18 21:34:01
UTC ·
(3 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-10-18 12:50:17
UTC ·
(3 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 02:45:32
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:42:43.330230 2026] [security2:error] [pid 27232:tid 27555] [client 31.58.32.49:56847] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:42:43.330230 2026] [security2:error] [pid 27232:tid 27555] [client 31.58.32.49:56847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.net"] [uri "/.env.dev"] [unique_id "ar3Io8fN0S5gjHUirKNOMAAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:10:49
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:10:44.210953 2026] [security2:error] [pid 17638:tid 17638] [client 31.58.32.49:41601] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:10:44.210953 2026] [security2:error] [pid 17638:tid 17638] [client 31.58.32.49:41601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.nbcnewsradio.com"] [uri "/.svn/wc.db"] [unique_id "apIjhDc_SnqJiRWwRYBY8QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 01:48:03
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:46:27.109572 2026] [security2:error] [pid 11742:tid 12109] [client 31.58.32.49:41793] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:46:27.109572 2026] [security2:error] [pid 11742:tid 12109] [client 31.58.32.49:41793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.kettlehill.com"] [uri "/wp-config.php-backup"] [unique_id "ahzkc1C4agaQG9FVRcmvngAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-28 06:50:05
UTC ·
(5 months ago)
| A web attack returned code 200 (success).
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-02-01 11:52:44
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:52:41.767316 2026] [security2:error] [pid 483:tid 654] [client 31.58.32.49:47633] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:52:41.767316 2026] [security2:error] [pid 483:tid 654] [client 31.58.32.49:47633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kettlehill.net"] [uri "/sample.htaccess"] [unique_id "aX8-iQMxl-cQ0UzvOvSNpAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 04:19:12
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:19:08.853751 2025] [security2:error] [pid 20966:tid 20966] [client 31.58.32.49:50413] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.32.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 23:19:08.853751 2025] [security2:error] [pid 20966:tid 20966] [client 31.58.32.49:50413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.nbcnewsradio.com"] [uri "/.env.www"] [unique_id "aRQKvIpvnVeNTZoPBVzLhQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
