🇺🇸
TPI-Abuse
2026-09-13 17:46:46
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:46:40.141111 2026] [security2:error] [pid 8867:tid 8867] [client 158.158.94.71:60476] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 13:46:40.141111 2026] [security2:error] [pid 8867:tid 8867] [client 158.158.94.71:60476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.postermodelsxxx.com"] [uri "/web.config.bak"] [unique_id "aqbhgNVAAJyvb2-PPP644wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-13 16:32:53
UTC ·
(1 month ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
LRob
2026-09-13 11:21:15
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 11:21 UTC
Bad Web Bot
🇳🇱
Savvii
2026-09-13 09:34:52
UTC ·
(1 month ago)
20 attempts against mh-misbehave-ban on grape
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 08:48:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 04:48:52.044124 2026] [security2:error] [pid 23124:tid 23124] [client 158.158.94.71:33274] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 04:48:52.044124 2026] [security2:error] [pid 23124:tid 23124] [client 158.158.94.71:33274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justkoolit.com"] [uri "/web.config.bak"] [unique_id "aqZjdG4NCEwGy_Wbmnib4wAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
securejdprop
2026-09-13 08:05:49
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 04:02:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:02:02.077290 2026] [security2:error] [pid 27596:tid 27596] [client 158.158.94.71:47806] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:02:02.077290 2026] [security2:error] [pid 27596:tid 27596] [client 158.158.94.71:47806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "heathbartley.com"] [uri "/web.config.bak"] [unique_id "aqYgOrrfbpEUSh-nTL1RMAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-09-13 03:33:00
UTC ·
(1 month ago)
IPBlock protected site ID [3390-wh].
Bad agent, site scraper bot [s].
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-12 15:33:19
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:33:11.358304 2026] [security2:error] [pid 26013:tid 26013] [client 158.158.94.71:39802] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:33:11.358304 2026] [security2:error] [pid 26013:tid 26013] [client 158.158.94.71:39802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dailybeautysupply.com"] [uri "/web.config.bak"] [unique_id "aqVwt7fiNkaa9M2IqTvpoQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 10:02:11
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 06:02:04.343233 2026] [security2:error] [pid 13720:tid 13720] [client 158.158.94.71:46740] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 06:02:04.343233 2026] [security2:error] [pid 13720:tid 13720] [client 158.158.94.71:46740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chicagowca.com"] [uri "/web.config.bak"] [unique_id "aqUjHHBCrqUYyFUs4xX97wAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 09:18:56
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:18:51.835483 2026] [security2:error] [pid 32455:tid 32455] [client 158.158.94.71:52476] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:18:51.835483 2026] [security2:error] [pid 32455:tid 32455] [client 158.158.94.71:52476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cchockeyhistory.org.dhsgrad.net"] [uri "/web.config.bak"] [unique_id "aqUY-wQtryL3HUhUYVOFWgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 08:20:40
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:20:34.414048 2026] [security2:error] [pid 25137:tid 25137] [client 158.158.94.71:39364] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 04:20:34.414048 2026] [security2:error] [pid 25137:tid 25137] [client 158.158.94.71:39364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiaappraisers.net"] [uri "/web.config.bak"] [unique_id "aqULUsd9MxFrBGUK9H57JQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 06:54:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 02:54:19.997730 2026] [security2:error] [pid 20129:tid 20129] [client 158.158.94.71:58236] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 02:54:19.997730 2026] [security2:error] [pid 20129:tid 20129] [client 158.158.94.71:58236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatmoldremover.com"] [uri "/web.config.bak"] [unique_id "aqT3Gxxtww2-_xfPeaEWcgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 05:23:20
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:23:16.269953 2026] [security2:error] [pid 31062:tid 31062] [client 158.158.94.71:49612] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.158.94.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:23:16.269953 2026] [security2:error] [pid 31062:tid 31062] [client 158.158.94.71:49612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beatthegm.com"] [uri "/web.config.bak"] [unique_id "aqThxN6gkkgzWdlkd5o6JAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-12 03:39:58
UTC ·
(1 month ago)
[Fri Sep 11 21:39:55.930500 2026] [authz_core:error] [pid 354183:tid 139766385444416] [client 158.158.94.71:45780] AH01630: client denied by server configuration: /var/www/horde/web.config.bak
[Fri Sep 11 21:39:57.007451 2026] [authz_core:error] [pid ...
show more
[Fri Sep 11 21:39:55.930500 2026] [authz_core:error] [pid 354183:tid 139766385444416] [client 158.158.94.71:45780] AH01630: client denied by server configuration: /var/www/horde/web.config.bak
[Fri Sep 11 21:39:57.007451 2026] [authz_core:error] [pid 354183:tid 139766385444416] [client 158.158.94.71:45806] AH01630: client denied by server configuration: /var/www/horde/Web.config.bak
[Fri Sep 11 21:39:57.343839 2026] [authz_core:error] [pid 353788:tid 139766385444416] [client 158.158.94.71:39882] AH01630: client denied by server configuration: /var/www/horde/db.sql
...
show less
Bad Web Bot
