🇺🇸
TPI-Abuse
2026-06-14 07:29:53
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:29:47.491318 2026] [security2:error] [pid 19079:tid 19079] [client 114.203.155.58:46442] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hogprinter.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hogprinter.com"] [uri "/robots.txt"] [unique_id "ai5Ya4gV-eZ8GHN2f5X9SQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-13 19:17:53
(3 days ago)
Email Scraper UA
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 15:18:33
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:18:26.726915 2026] [security2:error] [pid 1371:tid 1371] [client 114.203.155.58:52850] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.tsiwny.org|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tsiwny.org"] [uri "/robots.txt"] [unique_id "ai10wuID1_zdicA_YLPZ7AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:16:45
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:16:40.259789 2026] [security2:error] [pid 14333:tid 14333] [client 114.203.155.58:49146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.oligofoundry.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.oligofoundry.com"] [uri "/robots.txt"] [unique_id "aiz1yKVyrJkpIj2SlNKfdgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 10:30:50
(4 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 06:30:46.051300 2026] [security2:error] [pid 27960:tid 27960] [client 114.203.155.58:34792] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.renperfco.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.renperfco.com"] [uri "/robots.txt"] [unique_id "aivf1k6fMHMuaNCSyW2qeAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-12 04:49:16
(4 days ago)
Email Scraper UA
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 22:48:23
(4 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:48:16.574745 2026] [security2:error] [pid 23633:tid 23633] [client 114.203.155.58:35828] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.mfleetservice.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mfleetservice.com"] [uri "/robots.txt"] [unique_id "ais7MO1GH0YZs5rtzZk7EQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 21:31:18
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 17:31:10.975180 2026] [security2:error] [pid 11580:tid 11580] [client 114.203.155.58:52762] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||csems.org|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "csems.org"] [uri "/robots.txt"] [unique_id "aispHkdtWYrZVY5TNIiIAwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rsa
2026-06-11 17:45:00
(5 days ago)
excessive crawling ddos
DDoS Attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 10:01:33
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:01:28.737200 2026] [security2:error] [pid 18386:tid 18386] [client 114.203.155.58:50582] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wavecomputers.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wavecomputers.com"] [uri "/robots.txt"] [unique_id "aiqHeJebLompWNh4_F2WSQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:58:30
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:58:21.992162 2026] [security2:error] [pid 27658:tid 27658] [client 114.203.155.58:39778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cbmanufacturing.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cbmanufacturing.com"] [uri "/robots.txt"] [unique_id "aipcjZZBB4Fl9x-N_qHeswAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 23:48:42
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:48:36.070448 2026] [security2:error] [pid 31100:tid 31100] [client 114.203.155.58:47758] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.zebax.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.zebax.com"] [uri "/robots.txt"] [unique_id "ain31IPIHvQ6Ojqxvd021wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 18:26:45
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:26:38.373131 2026] [security2:error] [pid 20190:tid 20190] [client 114.203.155.58:42144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.j3pr.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.j3pr.com"] [uri "/robots.txt"] [unique_id "aimsXn_f-dmQ4cI-trpXGQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 15:16:54
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 114.203.155.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 11:16:48.672792 2026] [security2:error] [pid 30798:tid 30827] [client 114.203.155.58:50546] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wpe.uk.com|F|4"] [data "EmailCollect"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wpe.uk.com"] [uri "/robots.txt"] [unique_id "ail_4FIR5vXL5-N-p3NXLgAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-10 08:44:34
(6 days ago)
Email Scraper UA
Web App Attack