🇺🇸
TPI-Abuse
2026-11-08 06:21:54
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:21:46.954120 2026] [security2:error] [pid 24564:tid 24564] [client 180.153.236.225:1062 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:21:46.954120 2026] [security2:error] [pid 24564:tid 24564] [client 180.153.236.225:10627] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.garanta.co|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.garanta.co"] [uri "/"] [unique_id "avAU-iUuxgsYnwMkFtTalgAAAAo"], referer: https://www.garanta.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:54:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:54:49.690320 2026] [security2:error] [pid 20524:tid 20524] [client 180.153.236.225:3537 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:54:49.690320 2026] [security2:error] [pid 20524:tid 20524] [client 180.153.236.225:35375] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.naturalacu.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.naturalacu.com"] [uri "/"] [unique_id "auxuiQAvNn2QUXk2s6QaoQAAAAs"], referer: http://www.naturalacu.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
neron
2026-11-05 10:04:09
UTC ·
(3 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇨🇦
Mediashaker
2026-11-04 08:11:45
UTC ·
(4 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.225 (CN/China/-)
Bad Web Bot
🇹🇷
neron
2026-11-03 22:04:09
UTC ·
(4 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-02 22:04:08
UTC ·
(5 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-01 22:04:08
UTC ·
(6 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:08:20
UTC ·
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:08:16.883941 2026] [security2:error] [pid 30289:tid 30289] [client 180.153.236.225:4236 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:08:16.883941 2026] [security2:error] [pid 30289:tid 30289] [client 180.153.236.225:42369] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||circleinthesquare.org|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "circleinthesquare.org"] [uri "/"] [unique_id "auecMHXDp1_u393VLPo6pwAAABY"], referer: http://circleinthesquare.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 10:19:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:19:00.807452 2026] [security2:error] [pid 28135:tid 28135] [client 180.153.236.225:4955 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:19:00.807452 2026] [security2:error] [pid 28135:tid 28135] [client 180.153.236.225:49555] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.oceanicpier.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.oceanicpier.com"] [uri "/"] [unique_id "aucSFF1q9GZcSaA2c2TDEwAAAAA"], referer: http://www.oceanicpier.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 08:04:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:04:51.650159 2026] [security2:error] [pid 18311:tid 18311] [client 180.153.236.225:4526 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:04:51.650159 2026] [security2:error] [pid 18311:tid 18311] [client 180.153.236.225:45261] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.waterjetsolutions.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.waterjetsolutions.com"] [uri "/"] [unique_id "aubyo0GEO2Q6TPNQKAg52QAAABE"], referer: http://www.waterjetsolutions.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 01:11:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:11:05.597478 2026] [security2:error] [pid 4543:tid 4543] [client 180.153.236.225:21673] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:11:05.597478 2026] [security2:error] [pid 4543:tid 4543] [client 180.153.236.225:21673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gdpeters.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gdpeters.com"] [uri "/robots.txt"] [unique_id "auaRqWaxeI52kerBSG-c4QAAAAU"], referer: https://www.gdpeters.com/robots.txt
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-11-01 01:03:41
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.225 (CN/China/-)
Bad Web Bot
🇹🇷
neron
2026-10-31 16:04:09
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-10-30 16:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-10-29 10:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
