🇺🇸
TPI-Abuse
2026-11-08 19:57:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:57:09.112212 2026] [security2:error] [pid 20454:tid 20454] [client 180.153.236.40:58139] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:57:09.112212 2026] [security2:error] [pid 20454:tid 20454] [client 180.153.236.40:58139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||pizazzsalonandspa.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "pizazzsalonandspa.com"] [uri "/"] [unique_id "avDUFZ8-GoqJBuzSyXyrNwAAAAk"], referer: http://pizazzsalonandspa.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 19:08:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:08:07.161782 2026] [security2:error] [pid 2293:tid 2293] [client 180.153.236.40:42425] M ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:08:07.161782 2026] [security2:error] [pid 2293:tid 2293] [client 180.153.236.40:42425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||title33.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "title33.com"] [uri "/"] [unique_id "avDIl8uGJDGhLyqTMLSTlwAAABM"], referer: https://title33.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-08 18:56:07
UTC ·
(1 day ago)
Abusive crawler | ua: User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/1 | path: / | 2026-11-08 18:56 UTC
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-08 18:43:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:43:08.158167 2026] [security2:error] [pid 20661:tid 20661] [client 180.153.236.40:62355] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:43:08.158167 2026] [security2:error] [pid 20661:tid 20661] [client 180.153.236.40:62355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||darvintyne.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "darvintyne.com"] [uri "/"] [unique_id "avDCvPe68n5FeYNwluycDwAAAAc"], referer: https://darvintyne.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 18:21:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:20:54.374297 2026] [security2:error] [pid 1474:tid 1474] [client 180.153.236.40:31895] M ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:20:54.374297 2026] [security2:error] [pid 1474:tid 1474] [client 180.153.236.40:31895] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.midway-island.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.midway-island.com"] [uri "/"] [unique_id "avC9hoi-xyG95pv3VayZMwAAAAU"], referer: https://www.midway-island.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 07:19:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:19:43.470873 2026] [security2:error] [pid 4729:tid 4729] [client 180.153.236.40:11647] M ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:19:43.470873 2026] [security2:error] [pid 4729:tid 4729] [client 180.153.236.40:11647] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.crep-psych.org|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.crep-psych.org"] [uri "/"] [unique_id "avAij-UcBKCP1AHJ47GikwAAAAo"], referer: http://www.crep-psych.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
neron
2026-11-05 10:04:09
UTC ·
(5 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 08:35:06
UTC ·
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:35:00.592544 2026] [security2:error] [pid 10972:tid 10972] [client 180.153.236.40:26205] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 03:35:00.592544 2026] [security2:error] [pid 10972:tid 10972] [client 180.153.236.40:26205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||mysticbitchsalon.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "mysticbitchsalon.com"] [uri "/"] [unique_id "auw_tEnu6m-q-T7z-G41CgAAAAU"], referer: https://mysticbitchsalon.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 07:47:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:35.521411 2026] [security2:error] [pid 500038:tid 500047] [client 180.153.236.40:3292 ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 02:47:35.521411 2026] [security2:error] [pid 500038:tid 500047] [client 180.153.236.40:32929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.aspencommission.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aspencommission.com"] [uri "/"] [unique_id "auw0ly-Erd6SmYTxcI4Q0wAAAYI"], referer: https://www.aspencommission.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-11-05 06:13:26
UTC ·
(5 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.40 (CN/China/-)
Bad Web Bot
🇹🇷
neron
2026-11-03 22:04:09
UTC ·
(6 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-02 22:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇨🇦
Mediashaker
2026-11-02 00:03:24
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.40 (CN/China/-)
Bad Web Bot
🇹🇷
neron
2026-11-01 22:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 19:57:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:57:40.259807 2026] [security2:error] [pid 10926:tid 10926] [client 180.153.236.40:40451] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:57:40.259807 2026] [security2:error] [pid 10926:tid 10926] [client 180.153.236.40:40451] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||alltrashremoval.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "alltrashremoval.com"] [uri "/"] [unique_id "aueZtDfJAzr3HpifMfyW9gAAAAM"], referer: https://alltrashremoval.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
