🇺🇸
TPI-Abuse
2026-07-15 06:18:21
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 02:18:10.264278 2026] [security2:error] [pid 15006:tid 15006] [client 42.49.168.12:12250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||tedharris.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tedharris.com"] [uri "/"] [unique_id "alcmIhklBbhOpTmZQ1-ysAAAAA8"], referer: http://tedharris.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 19:43:26
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 15:43:13.365705 2026] [security2:error] [pid 23313:tid 23313] [client 42.49.168.12:11790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||tudor-harris.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tudor-harris.com"] [uri "/index.html"] [unique_id "alaRUX0HHuJ4u5xj8vwYewAAAB0"], referer: http://tudor-harris.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 20:27:59
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 42.49.168.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:27:47.578454 2026] [security2:error] [pid 527:tid 527] [client 42.49.168.12:13171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.misomayo.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.misomayo.com"] [uri "/"] [unique_id "alVKQ-THrtqvbOYZ5CLTNAAAAAE"], referer: http://www.misomayo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lavnet.net
2026-07-12 16:04:23
(3 days ago)
42.49.168.12 - - [12/Jul/2026:16:04:20 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/ ...
show more
42.49.168.12 - - [12/Jul/2026:16:04:20 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/Jul/2026:16:04:21 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/Jul/2026:16:04:21 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/Jul/2026:16:04:22 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/Jul/2026:16:04:22 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
42.49.168.12 - - [12/Jul/2026:16:04:23 +0000] "GET / HTTP/1.0" 400 292 "-" "-"
...
show less
Brute-Force
🇺🇸
k3rn3l109
2026-07-11 04:42:22
(5 days ago)
Sentinel honeypot: exploit-attempt hit on jupyter.edgecdnhub.com UA=Mozilla/5.0 (Windows NT 5.1; rv: ...
show more
Sentinel honeypot: exploit-attempt hit on jupyter.edgecdnhub.com UA=Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1
show less
Hacking
2024-10-10 17:57:56
(1 year ago)
alibaba cloud ddos like web scan
Bad Web Bot