🇩🇪
LRob
2026-11-08 06:52:49
UTC ·
(9 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/1 | 2026-11-08 06:52 UTC
Bad Web Bot
🇹🇷
neron
2026-11-05 10:04:09
UTC ·
(3 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:34:48
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:34:41.591893 2026] [security2:error] [pid 21550:tid 21550] [client 180.153.236.171:1441 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:34:41.591893 2026] [security2:error] [pid 21550:tid 21550] [client 180.153.236.171:14411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.peterlundman.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.peterlundman.com"] [uri "/"] [unique_id "auwjgfQ_jvcfYY_inPoUQAAAAAQ"], referer: http://www.peterlundman.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 05:47:24
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:47:18.133098 2026] [security2:error] [pid 6152:tid 6152] [client 180.153.236.171:31797] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:47:18.133098 2026] [security2:error] [pid 6152:tid 6152] [client 180.153.236.171:31797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.asbechiro.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.asbechiro.com"] [uri "/"] [unique_id "auwYZtY34-vL6nrj8kguQwAAABE"], referer: http://www.asbechiro.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
neron
2026-11-03 22:04:09
UTC ·
(4 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-02 22:04:08
UTC ·
(5 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-01 22:04:08
UTC ·
(6 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:47:45
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:47:42.836928 2026] [security2:error] [pid 11058:tid 11058] [client 180.153.236.171:5588 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:47:42.836928 2026] [security2:error] [pid 11058:tid 11058] [client 180.153.236.171:55889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||ornirwellness.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ornirwellness.com"] [uri "/"] [unique_id "auelbj5brC--Y7sZ86s1swAAAAQ"], referer: http://ornirwellness.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:30:39
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:30:34.212463 2026] [security2:error] [pid 21497:tid 21497] [client 180.153.236.171:5899 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:30:34.212463 2026] [security2:error] [pid 21497:tid 21497] [client 180.153.236.171:58991] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||utahproaudio.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "utahproaudio.com"] [uri "/"] [unique_id "auehatuN8Gcm0WQaaZIqzwAAAAo"], referer: https://utahproaudio.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-11-01 20:15:47
UTC ·
(6 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.171 (CN/China/-)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-01 19:33:43
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:33:36.624140 2026] [security2:error] [pid 27226:tid 27226] [client 180.153.236.171:2843 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:33:36.624140 2026] [security2:error] [pid 27226:tid 27226] [client 180.153.236.171:28437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||appalachianstomp.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "appalachianstomp.com"] [uri "/"] [unique_id "aueUEDDm6Q0JIj0xTQJnpwAAAAQ"], referer: https://appalachianstomp.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 18:15:37
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:15:31.714475 2026] [security2:error] [pid 27901:tid 27901] [client 180.153.236.171:1797 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:15:31.714475 2026] [security2:error] [pid 27901:tid 27901] [client 180.153.236.171:1797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jdeloa.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jdeloa.com"] [uri "/"] [unique_id "aueBw_R7QTjTLsv1OmlS4gAAAAE"], referer: http://www.jdeloa.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 17:56:34
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 12:56:28.926826 2026] [security2:error] [pid 25678:tid 25678] [client 180.153.236.171:4416 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 12:56:28.926826 2026] [security2:error] [pid 25678:tid 25678] [client 180.153.236.171:44161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||aangfl.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aangfl.com"] [uri "/"] [unique_id "aud9TEkE9NkEHsmgNbNMyQAAAAU"], referer: http://aangfl.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:52:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:52:04.976230 2026] [security2:error] [pid 32075:tid 32075] [client 180.153.236.171:5809 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:52:04.976230 2026] [security2:error] [pid 32075:tid 32075] [client 180.153.236.171:58097] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.feministvoice.blog|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.feministvoice.blog"] [uri "/"] [unique_id "aubhlGOiZZdVRI7KP1vthgAAAAs"], referer: http://www.feministvoice.blog/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:09:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:09:48.026946 2026] [security2:error] [pid 4692:tid 4703] [client 180.153.236.171:36031] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:09:48.026946 2026] [security2:error] [pid 4692:tid 4703] [client 180.153.236.171:36031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hobfl.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hobfl.com"] [uri "/"] [unique_id "aubXrJpznE6nd-40GUlK1wAAAIk"], referer: http://www.hobfl.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
