🇺🇸
TPI-Abuse
2026-11-14 00:25:41
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:25:33.422337 2026] [security2:error] [pid 12318:tid 12318] [client 116.113.1.62:8996] ModS ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:25:33.422337 2026] [security2:error] [pid 12318:tid 12318] [client 116.113.1.62:8996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.totenclaus.es|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.totenclaus.es"] [uri "/"] [unique_id "aveqfbG8AwD9_ZA8KI4L3gAAABE"], referer: http://www.totenclaus.es/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 23:25:59
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 18:25:54.130160 2026] [security2:error] [pid 32150:tid 32150] [client 116.113.1.62:17341] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 18:25:54.130160 2026] [security2:error] [pid 32150:tid 32150] [client 116.113.1.62:17341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||photoboothtogo.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "photoboothtogo.com"] [uri "/index.htm"] [unique_id "aZuQggR0WEUbHiAPSk31tQAAABE"], referer: http://photoboothtogo.com/index.htm
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-21 18:47:55
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 13:47:51.462972 2026] [security2:error] [pid 11946:tid 11946] [client 116.113.1.62:16211] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 13:47:51.462972 2026] [security2:error] [pid 11946:tid 11946] [client 116.113.1.62:16211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||aupapierjaponais.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aupapierjaponais.com"] [uri "/index.php"] [unique_id "aZn9189eHalfh86y0p1NtwAAAAo"], referer: http://aupapierjaponais.com/index.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-20 22:19:54
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 17:19:48.267304 2026] [security2:error] [pid 9467:tid 9467] [client 116.113.1.62:16246] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 17:19:48.267304 2026] [security2:error] [pid 9467:tid 9467] [client 116.113.1.62:16246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wiknwax.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wiknwax.com"] [uri "/"] [unique_id "aZjeBLGiYJpnOgK1G1zvigAAAAQ"], referer: http://www.wiknwax.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:45:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:45:23.382893 2026] [security2:error] [pid 25471:tid 25471] [client 116.113.1.62:17302] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:45:23.382893 2026] [security2:error] [pid 25471:tid 25471] [client 116.113.1.62:17302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.tonyvillanueva.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tonyvillanueva.com"] [uri "/"] [unique_id "aZElM1uL9NJE_reLbINUZgAAAAI"], referer: http://www.tonyvillanueva.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-14 23:34:53
UTC ·
(8 months ago)
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:34:46.705182 2026] [security2:error] [pid 2801:tid 2801] [client 116.113.1.62:0] ModSecuri ...
show more
(mod_security) mod_security (id:210831) triggered by 116.113.1.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 18:34:46.705182 2026] [security2:error] [pid 2801:tid 2801] [client 116.113.1.62:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.ndanetworks.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ndanetworks.com"] [uri "/"] [unique_id "aZEGlj0XXXHm0ovWCOgWYAAAAAs"], referer: https://www.ndanetworks.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Reinhard
2023-04-19 12:55:11
UTC ·
(3 years ago)
[19/Apr/2023:14:48:35 +0200] Probing root files.
Hacking
Web App Attack
🇿🇦
IrisFlower
2023-04-15 00:21:27
UTC ·
(3 years ago)
Unauthorized connection attempt detected from IP address 116.113.1.62 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2022-02-12 13:32:47
UTC ·
(4 years ago)
Unauthorized connection attempt detected from IP address 116.113.1.62 to port 443 [J]
Port Scan
Hacking
