🇺🇸
TPI-Abuse
2026-10-12 16:15:14
(39 minutes ago)
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:15:06.698157 2026] [security2:error] [pid 21456:tid 21456] [client 67.159.19.106:41084] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.imagineyourphotos.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.imagineyourphotos.com"] [uri "/images/slides/slide-6_fulfillment-791x310.jpg"] [unique_id "as0Hik65CANF_VZGpGhwrAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-12 16:09:33
(45 minutes ago)
Automated web vulnerability and path enumeration scan with excessive 404 requests
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 15:54:59
(1 hour ago)
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:54:54.738479 2026] [security2:error] [pid 30123:tid 30123] [client 67.159.19.106:39028] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||modmove.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "modmove.com"] [uri "/wp-content/uploads/2019/01/Loro_Palace_Films.jpg"] [unique_id "as0Czs-m8dHWQVBqo5oE4wAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SwinT
2026-10-12 15:00:08
(1 hour ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-12 12:54:19
(4 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇦
Dunham Support
2026-10-12 12:25:03
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 67.159.19.106 (US/United States/-)
SQL Injection
🇮🇹
VHosting
2026-10-12 04:35:05
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇨🇭
YF
2026-10-12 04:00:33
(12 hours ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 19:23:14
(21 hours ago)
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:23:06.863993 2026] [security2:error] [pid 20915:tid 20930] [client 67.159.19.106:55986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||pref-realestate.com|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "pref-realestate.com"] [uri "/wp-content/uploads/2026/08/MP-Sept-Event--768x994.jpg"] [unique_id "asviGkkxxXfI7EW3qChkyAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-10-11 18:58:22
(21 hours ago)
67.159.19.106 Web Application Firewall multiple violations
Hacking
Web App Attack
🇬🇧
consul.to
2026-10-11 18:03:01
(22 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 17:17:00
(23 hours ago)
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210831) triggered by 67.159.19.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 13:16:51.709275 2026] [security2:error] [pid 1110:tid 1110] [client 67.159.19.106:36930] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||wgs.cc|F|4"] [data "eCollector"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "wgs.cc"] [uri "/shop/images/card_acceptance/mastercard_transparent.png"] [unique_id "asvEg_y3AGvjTA-2__iJOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-10-11 16:38:22
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 67.159.19.106 (US/United States/-)
SQL Injection
