🇩🇪
Jarda_H
2026-06-15 23:10:06
(5 days ago)
http-bad-user-agent
Web App Attack
🇳🇱
BlueWire Hosting
2026-06-09 14:45:02
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
filstal.org
2026-05-27 14:07:44
(3 weeks ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-24 10:08:44
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 06:08:40.039194 2026] [security2:error] [pid 28719:tid 28719] [client 2a01:4f8:191:9150::2:45442] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||justinrudd.com|F|2"] [data ".barkbarkdaycare.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "justinrudd.com"] [uri "/www.barkbarkdaycare.com"] [unique_id "ahLOKOKT3_RqCj846qkaCQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 13:57:31
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 09:57:28.110275 2026] [security2:error] [pid 20289:tid 20314] [client 2a01:4f8:191:9150::2:33206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fishrapper.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/images/2020-fishing-link-hovers/debug.log"] [unique_id "agxsSGhXOQBc09WNsF4AnwAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 20:38:02
(1 month ago)
(mod_security) mod_security (id:220030) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:220030) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 16:37:54.445832 2026] [security2:error] [pid 24196:tid 24196] [client 2a01:4f8:191:9150::2:42040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "-C" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "19"] [id "220030"] [rev "9"] [msg "COMODO WAF: Vulnerability in PHP before 5.3.12 and 5.4.x before 5.4.2 (CVE-2012-1823)||www.bestcountryclubs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.bestcountryclubs.com"] [uri "/country-club-directory/countryclubs-west-virginia/sleepy-hollow-golf-"] [unique_id "agDsooAzDEKBFQstXuCtPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-04-01 19:10:31
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-30 16:01:47
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 12:01:42.171718 2026] [security2:error] [pid 10926:tid 10926] [client 2a01:4f8:191:9150::2:55102] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||urlpick.com|F|2"] [data ".adoptsearch.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "urlpick.com"] [uri "/www.adoptsearch.com"] [unique_id "acqeZvJWk5IL-jsrVsUwpgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 01:32:28
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 21:32:21.684753 2026] [security2:error] [pid 17712:tid 17712] [client 2a01:4f8:191:9150::2:54266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||silvermoonherbals.com|F|2"] [data ".moongoth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "silvermoonherbals.com"] [uri "/www.moongoth.com"] [unique_id "aboApew6MhrCUTl-W_9tuQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-03-17 12:49:22
(3 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇬🇧
Mendip_Defender
2026-03-11 22:51:08
(3 months ago)
2a01:4f8:191:9150::2 - - [11/Mar/2026:22:51:05 +0000] "GET / HTTP/1.0" 301 4157 "-" "serpstatbot/2.1 ...
show more
2a01:4f8:191:9150::2 - - [11/Mar/2026:22:51:05 +0000] "GET / HTTP/1.0" 301 4157 "-" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected] )"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-11 08:52:51
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 04:52:46.262599 2026] [security2:error] [pid 6668:tid 6668] [client 2a01:4f8:191:9150::2:38674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||noisepie.com|F|2"] [data ".bat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "noisepie.com"] [uri "/video/tcow96.bat"] [unique_id "abEtXtrmJH0085set4kpmgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
www.winos.me
2026-03-05 18:20:12
(3 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-01 12:23:37
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 07:23:31.060506 2026] [security2:error] [pid 5762:tid 5762] [client 2a01:4f8:191:9150::2:54096] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||clubfansite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clubfansite.com"] [uri "/wisinyadel/youtube.com"] [unique_id "aaQvw09osWXtDiRwOyZ2TgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 22:04:07
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:9150::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 17:03:59.588429 2026] [security2:error] [pid 4785:tid 4785] [client 2a01:4f8:191:9150::2:34520] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||djbadger.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "djbadger.com"] [uri "/mortuarystudios.com"] [unique_id "aaDDT2aZD_MZ-eLS3kREpAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack