🇺🇸
TPI-Abuse
2026-07-11 20:30:25
(20 hours ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 16:30:11.167521 2026] [security2:error] [pid 11059:tid 11059] [client 39.154.6.93:11492] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||bvnboysbasketball.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bvnboysbasketball.com"] [uri "/"] [unique_id "alKn016Ife0KxKMjyJ_uggAAABk"], referer: http://bvnboysbasketball.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 18:56:46
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:56:33.660361 2026] [security2:error] [pid 24782:tid 24782] [client 39.154.6.93:12241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hadleymarketing.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hadleymarketing.com"] [uri "/"] [unique_id "akqo4a4rhW1jMu10AV2qXwAAAAs"], referer: http://www.hadleymarketing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-01 06:40:07
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2026-04-27 20:53:31
(2 months ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 16:53:21.667267 2026] [security2:error] [pid 9418:tid 9418] [client 39.154.6.93:13197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.sparler.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.sparler.com"] [uri "/"] [unique_id "ae_MwWz1SA0FRhs98GFacgAAAAY"], referer: http://www.sparler.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-25 23:26:39
(4 months ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 18:26:29.618050 2026] [security2:error] [pid 3685:tid 3685] [client 39.154.6.93:13161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||fisseq.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "fisseq.com"] [uri "/"] [unique_id "aZ-FJetbu2KNQ1Uhqx24ZAAAABY"], referer: http://fisseq.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 20:29:45
(4 months ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 15:29:33.577888 2026] [security2:error] [pid 25343:tid 25343] [client 39.154.6.93:13122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.animecelgallery.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.animecelgallery.com"] [uri "/"] [unique_id "aZ4KLXFPA5S1qDu_huIdzwAAACI"], referer: http://www.animecelgallery.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 19:34:14
(4 months ago)
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210831) triggered by 39.154.6.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 14:34:04.310456 2026] [security2:error] [pid 15557:tid 15557] [client 39.154.6.93:13227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.higginskids.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.higginskids.com"] [uri "/"] [unique_id "aZyrrFlkTuJ4XvpNLCJCowAAAAc"], referer: http://www.higginskids.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-28 12:02:20
(1 year ago)
Web attack
Bad Web Bot
Web App Attack
2024-09-27 06:02:16
(1 year ago)
Web attack
Bad Web Bot
Web App Attack
🇿🇦
IrisFlower
2022-10-04 02:37:32
(3 years ago)
Unauthorized connection attempt detected from IP address 39.154.6.93 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2022-04-10 10:46:18
(4 years ago)
Unauthorized connection attempt detected from IP address 39.154.6.93 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2021-09-23 14:47:08
(4 years ago)
Unauthorized connection attempt detected from IP address 39.154.6.93 to port 443 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2021-09-23 13:34:44
(4 years ago)
Unauthorized connection attempt detected from IP address 39.154.6.93 to port 443 [J]
Port Scan
Hacking