🇺🇸
TPI-Abuse
2026-11-08 18:49:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:49:30.734002 2026] [security2:error] [pid 3175:tid 3175] [client 180.153.236.82:56871] M ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:49:30.734002 2026] [security2:error] [pid 3175:tid 3175] [client 180.153.236.82:56871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||ltrinc.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ltrinc.com"] [uri "/"] [unique_id "avDEOiZZZDOjPfO-KlqdZQAAAAY"], referer: http://ltrinc.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:20:58
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:20:52.417006 2026] [security2:error] [pid 15911:tid 15911] [client 180.153.236.82:18991] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:20:52.417006 2026] [security2:error] [pid 15911:tid 15911] [client 180.153.236.82:18991] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gpusa-ca.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gpusa-ca.com"] [uri "/"] [unique_id "avAGtFp3WWlvI5YFW35BCQAAAAU"], referer: https://www.gpusa-ca.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-11-08 04:20:57
UTC ·
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 180.153.236.82 (CN/China/-)
Bad Web Bot
🇹🇷
neron
2026-11-05 10:04:09
UTC ·
(5 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-03 22:04:09
UTC ·
(6 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-02 22:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-11-01 22:04:08
UTC ·
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 21:08:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:07:59.029320 2026] [security2:error] [pid 9255:tid 9255] [client 180.153.236.82:57983] M ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:07:59.029320 2026] [security2:error] [pid 9255:tid 9255] [client 180.153.236.82:57983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||usfspirit.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "usfspirit.com"] [uri "/"] [unique_id "aueqL_V27IN4-66AO1hyygAAAAw"], referer: http://usfspirit.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:17:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:16:55.163802 2026] [security2:error] [pid 32158:tid 32158] [client 180.153.236.82:14911] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:16:55.163802 2026] [security2:error] [pid 32158:tid 32158] [client 180.153.236.82:14911] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||ftiptondds.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ftiptondds.com"] [uri "/"] [unique_id "aueeN_ykZaWl4DDiShrhmgAAABo"], referer: https://ftiptondds.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 19:04:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:04:44.844106 2026] [security2:error] [pid 14860:tid 14992] [client 180.153.236.82:45319] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 14:04:44.844106 2026] [security2:error] [pid 14860:tid 14992] [client 180.153.236.82:45319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||hawk-av.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "hawk-av.com"] [uri "/"] [unique_id "aueNTCPQlXsZi7guKwRm3wAAAk0"], referer: https://hawk-av.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 18:11:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:11:20.576643 2026] [security2:error] [pid 28430:tid 28430] [client 180.153.236.82:55105] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:11:20.576643 2026] [security2:error] [pid 28430:tid 28430] [client 180.153.236.82:55105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||ocdentist.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ocdentist.com"] [uri "/"] [unique_id "aueAyHj29HaHf_JaTOPBWQAAAA0"], referer: https://ocdentist.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 08:05:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:05:16.956561 2026] [security2:error] [pid 15648:tid 15648] [client 180.153.236.82:56357] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 03:05:16.956561 2026] [security2:error] [pid 15648:tid 15648] [client 180.153.236.82:56357] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.walterceron.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.walterceron.com"] [uri "/"] [unique_id "aubyvOP3LSYvdh5ZVy6IWwAAAAg"], referer: https://www.walterceron.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:15:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:15:16.702059 2026] [security2:error] [pid 10221:tid 10221] [client 180.153.236.82:56875] ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:15:16.702059 2026] [security2:error] [pid 10221:tid 10221] [client 180.153.236.82:56875] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.stoneageartifacts.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stoneageartifacts.com"] [uri "/"] [unique_id "aubY9Im8Gr1nIlDXybfBAQAAAA8"], referer: http://www.stoneageartifacts.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 05:49:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:49:34.200890 2026] [security2:error] [pid 8131:tid 8161] [client 180.153.236.82:3509] Mo ...
show more
(mod_security) mod_security (id:210831) triggered by 180.153.236.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:49:34.200890 2026] [security2:error] [pid 8131:tid 8161] [client 180.153.236.82:3509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.vivierae.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vivierae.com"] [uri "/"] [unique_id "aubS7msUw18JgwMihQ-R6QAAANM"], referer: https://www.vivierae.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-01 01:15:57
UTC ·
(1 week ago)
Abusive crawler | ua: User-Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/1 | path: /robots.txt | 2026-11-01 01:15 UTC
Bad Web Bot
