2026-10-07 11:22:04
(1 day ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 02:06:37
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:06:30.773380 2026] [security2:error] [pid 18253:tid 18253] [client 46.203.154.226:42039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/.env.stage"] [unique_id "apI-pqzO_BeMx9AdLNxenQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
HeliJP
2026-08-22 17:45:55
(1 month ago)
2026-08-22T17:41:19Z - Recognized attacks\bad behavior from IP address 46.203.154.226 on port 443\80 ...
show more
2026-08-22T17:41:19Z - Recognized attacks\bad behavior from IP address 46.203.154.226 on port 443\80 (3 daily hits): client denied by server configuration
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 12:52:23
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 07:52:19.940863 2026] [security2:error] [pid 16719:tid 16779] [client 46.203.154.226:54665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.kettlehill.kettlehill.com"] [uri "/.env.www"] [unique_id "aX9Mg9Cv_m7wviPTH3EmGwAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-17 03:31:48
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:31:40.122789 2026] [security2:error] [pid 507:tid 507] [client 46.203.154.226:39615] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nbcnewsradio.com"] [uri "/logs/error.log"] [unique_id "aWsCnIGc3ziCENjibv6G1gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raspi4
2025-12-31 19:23:28
(9 months ago)
Fail2Ban Ban Triggered
Brute-Force
Web App Attack
🇺🇸
Kurtbaby
2025-12-30 15:15:00
(9 months ago)
Part of a coordinated attack from many different source IPs that targeted our company's VPN Christma ...
show more
Part of a coordinated attack from many different source IPs that targeted our company's VPN Christmas Eve through the end of the 26th.
show less
Hacking
2025-12-01 14:40:04
(10 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇩🇪
ps-center
2025-11-21 08:10:02
(10 months ago)
SS5: Web Attack GET /icons/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇸🇪
Per-Erik Runebert
2025-11-16 09:39:18
(10 months ago)
Excessive unauthorized requests
Hacking
🇺🇸
TPI-Abuse
2025-11-12 13:41:58
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 08:41:50.642276 2025] [security2:error] [pid 11547:tid 11547] [client 46.203.154.226:33759] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nbcnewsradio.com"] [uri "/.htpasswd"] [unique_id "aRSOnsxQgTByjL3ITvZD5wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 14:44:50
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.203.154.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 10:44:46.553232 2025] [security2:error] [pid 15497:tid 15522] [client 46.203.154.226:46393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/.env.old"] [unique_id "aQYc3j8P3DuTvo3jZlb1cAAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
