🇺🇸
TPI-Abuse
2026-11-06 19:06:32
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:06:27.564656 2026] [security2:error] [pid 17533:tid 17533] [client 1.85.58.178:25967] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:06:27.564656 2026] [security2:error] [pid 17533:tid 17533] [client 1.85.58.178:25967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.citizensforsanity.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.citizensforsanity.com"] [uri "/"] [unique_id "au4lMxNkhFWpNKFe0pmLlQAAAB8"], referer: http://www.citizensforsanity.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 19:36:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:36:44.252647 2026] [security2:error] [pid 5201:tid 5201] [client 1.85.58.178:13466] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 14:36:44.252647 2026] [security2:error] [pid 5201:tid 5201] [client 1.85.58.178:13466] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.goldandsilverni.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.goldandsilverni.com"] [uri "/"] [unique_id "auuJTKh4Rg5TneqeNrJoxAAAAA8"], referer: http://www.goldandsilverni.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 21:13:32
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:13:27.206693 2026] [security2:error] [pid 29685:tid 29685] [client 1.85.58.178:38117] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:13:27.206693 2026] [security2:error] [pid 29685:tid 29685] [client 1.85.58.178:38117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.islandchristmascards.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.islandchristmascards.com"] [uri "/"] [unique_id "asqqd3EgtQCU8gGpWAXHvgAAAHs"], referer: http://www.islandchristmascards.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 02:23:51
UTC ·
(3 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:23:43.394853 2026] [security2:error] [pid 27882:tid 27882] [client 1.85.58.178:42136] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:23:43.394853 2026] [security2:error] [pid 27882:tid 27882] [client 1.85.58.178:42136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.yvonnebraden.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.yvonnebraden.com"] [uri "/"] [unique_id "albvLxqsvy99RDZ53dhIQAAAAAE"], referer: http://www.yvonnebraden.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 16:35:51
UTC ·
(4 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:35:45.993854 2026] [security2:error] [pid 1976:tid 1976] [client 1.85.58.178:62144] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:35:45.993854 2026] [security2:error] [pid 1976:tid 1976] [client 1.85.58.178:62144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cypraea.info|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cypraea.info"] [uri "/"] [unique_id "akfk4XYUopL1zV8F-2TITgAAABk"], referer: http://www.cypraea.info/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 20:29:18
UTC ·
(4 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 16:29:12.604053 2026] [security2:error] [pid 15596:tid 15596] [client 1.85.58.178:29589] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 16:29:12.604053 2026] [security2:error] [pid 15596:tid 15596] [client 1.85.58.178:29589] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.metalgecko.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.metalgecko.com"] [uri "/"] [unique_id "ajWmmAssRKjPlyTtAVK0DAAAABs"], referer: https://www.metalgecko.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 20:01:49
UTC ·
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 16:01:44.859150 2026] [security2:error] [pid 15943:tid 15962] [client 1.85.58.178:58747] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 16:01:44.859150 2026] [security2:error] [pid 15943:tid 15962] [client 1.85.58.178:58747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.schoprint.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.schoprint.com"] [uri "/"] [unique_id "ahtCKNjhmHMlVm6kfO3WXwAAAUg"], referer: http://www.schoprint.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 21:07:09
UTC ·
(5 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 17:07:01.197614 2026] [security2:error] [pid 2773:tid 2773] [client 1.85.58.178:53632] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 17:07:01.197614 2026] [security2:error] [pid 2773:tid 2773] [client 1.85.58.178:53632] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.accu-tuner.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.accu-tuner.com"] [uri "/index.html"] [unique_id "agOWde5A6-ZCmMTi-OAH_AAAAAg"], referer: https://www.accu-tuner.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 23:56:41
UTC ·
(7 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 19:56:33.964956 2026] [security2:error] [pid 22539:tid 22539] [client 1.85.58.178:3368] ModSec ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 19:56:33.964956 2026] [security2:error] [pid 22539:tid 22539] [client 1.85.58.178:3368] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||quincysheetmetal.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "quincysheetmetal.com"] [uri "/"] [unique_id "abdHMeHhJVFLBSxJZ5ZNbwAAAAk"], referer: http://quincysheetmetal.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 22:24:43
UTC ·
(7 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 18:24:39.685743 2026] [security2:error] [pid 22928:tid 22928] [client 1.85.58.178:1900] ModSec ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 18:24:39.685743 2026] [security2:error] [pid 22928:tid 22928] [client 1.85.58.178:1900] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.elizabeth-furlow.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.elizabeth-furlow.com"] [uri "/"] [unique_id "abXgJymLQAY5UxcKibZjmQAAAAk"], referer: http://www.elizabeth-furlow.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-28 05:17:56
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 00:17:49.874904 2026] [security2:error] [pid 5767:tid 5767] [client 1.85.58.178:28528] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 00:17:49.874904 2026] [security2:error] [pid 5767:tid 5767] [client 1.85.58.178:28528] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||dietzengineers.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "dietzengineers.com"] [uri "/"] [unique_id "aaJ6fWbap4snTX0kVJQ9iwAAABM"], referer: https://dietzengineers.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 21:19:31
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 16:19:24.403940 2026] [security2:error] [pid 1621:tid 1621] [client 1.85.58.178:29164] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 16:19:24.403940 2026] [security2:error] [pid 1621:tid 1621] [client 1.85.58.178:29164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.rkstewart.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.rkstewart.com"] [uri "/"] [unique_id "aZjP3PMW1QZBY52XmfFgQwAAABo"], referer: http://www.rkstewart.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-17 22:50:40
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 17:50:33.784471 2026] [security2:error] [pid 8737:tid 8737] [client 1.85.58.178:6050] ModSecur ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 17:50:33.784471 2026] [security2:error] [pid 8737:tid 8737] [client 1.85.58.178:6050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||weismanovens.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "weismanovens.com"] [uri "/index.htm"] [unique_id "aZTwuVEBovH1IeSEVqmkpwAAAAU"], referer: http://weismanovens.com/index.htm
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 22:29:41
UTC ·
(9 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 17:29:36.458942 2026] [security2:error] [pid 28952:tid 28952] [client 1.85.58.178:52873] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 17:29:36.458942 2026] [security2:error] [pid 28952:tid 28952] [client 1.85.58.178:52873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||roselockecasting.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "roselockecasting.com"] [uri "/index.html"] [unique_id "aYUZ0DCfa30TUFfDmtbL-AAAAAk"], referer: http://roselockecasting.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 20:59:19
UTC ·
(9 months ago)
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 15:58:55.522793 2026] [security2:error] [pid 7423:tid 7423] [client 1.85.58.178:43550] ModSecu ...
show more
(mod_security) mod_security (id:210831) triggered by 1.85.58.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 15:58:55.522793 2026] [security2:error] [pid 7423:tid 7423] [client 1.85.58.178:43550] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||largeprintdailyjournal.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "largeprintdailyjournal.com"] [uri "/"] [unique_id "aXfVj6HIH_XpDiQGMQ6BOgAAAAg"], referer: http://largeprintdailyjournal.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
