🇩🇪
LRob
2026-08-02 12:54:02
UTC ·
(3 months ago)
CrowdSec: crowdsecurity/http-bad-user-agent | req: /robots.txt | 2 distinct paths | UA: serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/;
[email protected] )
Bad Web Bot
🇩🇪
filstal.org
2026-07-23 10:37:40
UTC ·
(3 months ago)
Unauthorized web crawling by known aggressive crawler or data harvesting bot detected by Fail2Ban
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-22 09:51:25
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:51:18.793059 2026] [security2:error] [pid 642995:tid 642995] [client 2a01:4f ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:51:18.793059 2026] [security2:error] [pid 642995:tid 642995] [client 2a01:4f8:221:215e::2:57990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cajunpicasso.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cajunpicasso.com"] [uri "/tapestry/[email protected] "] [unique_id "amCSlkKk-EleXVlcLJm3_AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-01 18:40:03
UTC ·
(5 months ago)
Detected Hacking, SQL Injection or general Web App Attack
Web App Attack
🇩🇪
Lino Project
2026-05-21 14:34:46
UTC ·
(5 months ago)
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-bad-user-agent
Hacking
🇺🇸
TPI-Abuse
2026-05-06 21:01:13
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 17:01:06.660288 2026] [security2:error] [pid 15621:tid 15621] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 17:01:06.660288 2026] [security2:error] [pid 15621:tid 15621] [client 2a01:4f8:221:215e::2:60062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bigchus.com|F|2"] [data ".wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigchus.com"] [uri "/caleidoscopia/amescua.wordpress.com"] [unique_id "afusEoYOWohmraaq-34-7gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:02:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:02:21.712244 2026] [security2:error] [pid 22241:tid 22241] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:02:21.712244 2026] [security2:error] [pid 22241:tid 22241] [client 2a01:4f8:221:215e::2:42644] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cameronsol.com|F|2"] [data ".camerongunsmith.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cameronsol.com"] [uri "/www.camerongunsmith.com"] [unique_id "acp0XRGdnzMLYgBLYu6i-QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 22:17:48
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:17:41.143328 2026] [security2:error] [pid 8825:tid 8825] [client 2a01:4f8:22 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:17:41.143328 2026] [security2:error] [pid 8825:tid 8825] [client 2a01:4f8:221:215e::2:58642] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aavondalervstorage.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aavondalervstorage.com"] [uri "/[email protected] "] [unique_id "acmlBeP7YzzBaObzM4_nWQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-03-27 09:42:38
UTC ·
(7 months ago)
[Fri Mar 27 09:42:00.016847 2026] [authz_core:error] [pid 500189:tid 500233] [client 2a01:4f8:221:215e::2:39186] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
[Fri Mar 27 09:42:10.240821 2026] [authz_core:error] [p ...
show more
[Fri Mar 27 09:42:00.016847 2026] [authz_core:error] [pid 500189:tid 500233] [client 2a01:4f8:221:215e::2:39186] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
[Fri Mar 27 09:42:10.240821 2026] [authz_core:error] [pid 500188:tid 500207] [client 2a01:4f8:221:215e::2:43298] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
[Fri Mar 27 09:42:19.644695 2026] [authz_core:error] [pid 500188:tid 500191] [client 2a01:4f8:221:215e::2:47104] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
[Fri Mar 27 09:42:30.076514 2026] [authz_core:error] [pid 500188:tid 500214] [client 2a01:4f8:221:215e::2:51354] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
[Fri Mar 27 09:42:37.360719 2026] [authz_core:error] [pid 500188:tid 500192] [client 2a01:4f8:221:215e::2:55102] AH01630: client denied by server configuration: proxy:https://5.75.191.34/ucp.php
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 10:09:04
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 06:08:59.481720 2026] [security2:error] [pid 24405:tid 24405] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 06:08:59.481720 2026] [security2:error] [pid 24405:tid 24405] [client 2a01:4f8:221:215e::2:37616] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||accordionstars.com|F|2"] [data ".accordionfactory.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "accordionstars.com"] [uri "/www.accordionfactory.com"] [unique_id "acO0OxE8fVkNqKptYr4NBwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 09:49:43
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 05:49:37.086181 2026] [security2:error] [pid 28588:tid 28588] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 05:49:37.086181 2026] [security2:error] [pid 28588:tid 28588] [client 2a01:4f8:221:215e::2:54314] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.achildsspace.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.achildsspace.com"] [uri "/instagram.com"] [unique_id "acOvsfPnJRWaNd0WWUt5tgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-22 02:20:32
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 22:20:28.720817 2026] [security2:error] [pid 21573:tid 21573] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 22:20:28.720817 2026] [security2:error] [pid 21573:tid 21573] [client 2a01:4f8:221:215e::2:44220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lemoulinavent.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lemoulinavent.org"] [uri "/en/attractions/la-machine-a-voler/la-balancoire-russe/[email protected] "] [unique_id "ab9R7PYJo1gXCKlnGdA7IwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-03-05 20:42:00
UTC ·
(8 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-05 18:58:23
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 13:58:16.399406 2026] [security2:error] [pid 1177:tid 1177] [client 2a01:4f8:22 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 13:58:16.399406 2026] [security2:error] [pid 1177:tid 1177] [client 2a01:4f8:221:215e::2:33726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scoutinsignia.com|F|2"] [data ".coffeecup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/settummanque.net/www.coffeecup.com"] [unique_id "aanSSL57cnuBpYsO-ZDiOwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 11:35:06
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 06:35:02.418038 2026] [security2:error] [pid 16147:tid 16147] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:221:215e::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 06:35:02.418038 2026] [security2:error] [pid 16147:tid 16147] [client 2a01:4f8:221:215e::2:47424] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarscout.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarscout.com"] [uri "/images/desktop.ini"] [unique_id "aaAv5vItTpTLwq4KEgnPygAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
