🇺🇸
TPI-Abuse
2026-11-12 19:31:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:47.200341 2026] [security2:error] [pid 24501:tid 24501] [client 120.82.82.85:51437] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:31:47.200341 2026] [security2:error] [pid 24501:tid 24501] [client 120.82.82.85:51437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.pbdot3.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pbdot3.com"] [uri "/"] [unique_id "avYUIwJAjialXuy8isyxngAAABw"], referer: http://www.pbdot3.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-10-16 01:50:04
UTC ·
(4 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: /sitemap.xml | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-10-15 08:53:31
UTC ·
(4 weeks ago)
[15/Oct/2026:11:53:30 +0300] -- 120.82.82.85 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /config.json HTTP/1.1
Bad Web Bot
Web App Attack
🇮🇩
David Koswari
2026-05-29 05:14:00
UTC ·
(5 months ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇺🇸
TPI-Abuse
2026-01-24 23:03:23
UTC ·
(9 months ago)
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 18:03:20.040057 2026] [security2:error] [pid 27362:tid 27362] [client 120.82.82.85:56710] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 24 18:03:20.040057 2026] [security2:error] [pid 27362:tid 27362] [client 120.82.82.85:56710] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||pamelaweisberg.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "pamelaweisberg.com"] [uri "/index.html"] [unique_id "aXVPuC1mcHfdr1yBYzf6TAAAAA0"], referer: http://pamelaweisberg.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-20 05:34:21
UTC ·
(9 months ago)
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 00:34:17.397153 2026] [security2:error] [pid 18759:tid 18759] [client 120.82.82.85:53983] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 120.82.82.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 00:34:17.397153 2026] [security2:error] [pid 18759:tid 18759] [client 120.82.82.85:53983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.1214productions.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.1214productions.com"] [uri "/"] [unique_id "aW8T2ccsxheI6fBxTZK6cAAAAAs"], referer: http://www.1214productions.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-10-22 23:03:01
UTC ·
(1 year ago)
404 rapid attacks with bad user agents
DDoS Attack
