🇺🇸
TPI-Abuse
2026-10-13 00:23:37
(18 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 20:23:33.925635 2026] [security2:error] [pid 16090:tid 16090] [client 50.7.232.234:41420] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dodojuice.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dodojuice.com"] [uri "/juicebar/download/file.php"] [unique_id "as16BZWMDsBnGp1POxkCwwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 23:53:41
(19 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:53:33.299813 2026] [security2:error] [pid 28027:tid 28027] [client 50.7.232.234:36922] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||intercite.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "intercite.com"] [uri "/images/logofr.png"] [unique_id "as1y_Wvk8_wMVUXtKqcQCAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2026-10-12 23:11:02
(19 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 22:16:04
(20 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:16:01.328723 2026] [security2:error] [pid 30759:tid 30759] [client 50.7.232.234:41080] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||tobyjohnson.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tobyjohnson.com"] [uri "/Images/qs_mailn.gif"] [unique_id "as1cId0pCeXE7-kEBACwhAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 21:53:25
(21 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:53:17.288357 2026] [security2:error] [pid 26289:tid 26289] [client 50.7.232.234:43568] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.vexxarr.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vexxarr.com"] [uri "/home.gif"] [unique_id "as1Wzc3II-ojMYy81466cQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 21:10:11
(21 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:10:03.758599 2026] [security2:error] [pid 2796:tid 2796] [client 50.7.232.234:55994] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||pelicancovecondo.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "pelicancovecondo.com"] [uri "/images/white_dot.gif"] [unique_id "as1Mq8CDjpPlvnM4aRO1SAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 19:57:31
(22 hours ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:57:26.204259 2026] [security2:error] [pid 28670:tid 28670] [client 50.7.232.234:54382] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cchockeyhistory.org|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cchockeyhistory.org"] [uri "/JeffersHS/Jets80-81.jpg"] [unique_id "as07po4100VaupCXndczZAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 16:35:38
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:35:34.103496 2026] [security2:error] [pid 30681:tid 30681] [client 50.7.232.234:44222] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||naturephotographyadventures.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "naturephotographyadventures.com"] [uri "/images/ky22_lion&cub5554dk500.jpg"] [unique_id "as0MVgZlV6kfE7aNDLfhrwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 16:09:12
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:09:05.384764 2026] [security2:error] [pid 27492:tid 27492] [client 50.7.232.234:49578] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dorioconnell.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dorioconnell.com"] [uri "/public_html/wp-content/uploads/IMG_0613-1024x786.jpg"] [unique_id "as0GIZUpvjUMjFO8vrRDgQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 15:51:58
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:51:52.684484 2026] [security2:error] [pid 26200:tid 26200] [client 50.7.232.234:60086] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||modmove.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "modmove.com"] [uri "/wp-content/uploads/2026/06/ForgottenIslandTrailer1.jpg"] [unique_id "as0CGNgpvK0p-HJhAwcPwwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SwinT
2026-10-12 15:00:11
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-12 12:54:19
(1 day ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 09:43:22
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 50.7.232.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:43:18.923576 2026] [security2:error] [pid 11939:tid 11991] [client 50.7.232.234:43100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||blog.juantrece.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "blog.juantrece.com"] [uri "/wp-content/uploads/2024/03/pedalera-orden-pedales.jpg"] [unique_id "asyrtjK87TT1CfC3f2bbIgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-10-12 01:21:47
(1 day ago)
50.7.232.234 Web Application Firewall multiple violations
Hacking
Web App Attack
🇨🇭
YF
2026-10-12 00:12:15
(1 day ago)
Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 2 ...
show more
Malicious web activity confirmed — IP previously flagged as suspicious (automated re-check, score: 25%)
show less
Web App Attack
