🇩🇪
LRob
2026-11-06 15:12:18
UTC ·
(4 hours ago)
WAF-refused requests | path: / | 2026-11-06 15:12 UTC
Web App Attack
Hacking
🇩🇪
LRob
2026-10-24 11:57:00
UTC ·
(1 week ago)
WAF-refused requests | path: /
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-16 13:08:14
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:08:07.722194 2026] [security2:error] [pid 14881:tid 14881] [c ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:08:07.722194 2026] [security2:error] [pid 14881:tid 14881] [client 88.186.185.18:64107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||socconstruction.com|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "socconstruction.com"] [uri "/"] [unique_id "atIht8fBoUsAIFmQIvYDtwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 12:34:59
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:34:53.597989 2026] [security2:error] [pid 32352:tid 32352] [c ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:34:53.597989 2026] [security2:error] [pid 32352:tid 32352] [client 88.186.185.18:57329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||enselme.com|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "enselme.com"] [uri "/"] [unique_id "atIZ7bVnc-Jt0Q1LyypelgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-16 12:27:33
UTC ·
(3 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-16 12:12:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:11:58.043520 2026] [security2:error] [pid 630:tid 650] [clien ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:11:58.043520 2026] [security2:error] [pid 630:tid 650] [client 88.186.185.18:58663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||usu.net|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "usu.net"] [uri "/"] [unique_id "atIUjvSlgcRwU0hID4sujwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 11:56:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:56:23.572252 2026] [security2:error] [pid 6130:tid 6130] [cli ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:56:23.572252 2026] [security2:error] [pid 6130:tid 6130] [client 88.186.185.18:49366] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||kmp.net|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kmp.net"] [uri "/"] [unique_id "atIQ574BHPE6WQomiE9-yAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 10:44:28
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:44:21.506309 2026] [security2:error] [pid 27505:tid 27505] [c ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:44:21.506309 2026] [security2:error] [pid 27505:tid 27505] [client 88.186.185.18:62837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||evelia.com|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "evelia.com"] [uri "/"] [unique_id "atIABYYA4wZbRZAG4OVy7QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:18:31
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:18:27.071240 2026] [security2:error] [pid 25113:tid 25113] [c ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:18:27.071240 2026] [security2:error] [pid 25113:tid 25113] [client 88.186.185.18:59665] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||aeservices.com|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aeservices.com"] [uri "/"] [unique_id "atFtU4DCyx2aToN0Y8u2vAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:23:22
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:23:18.166613 2026] [security2:error] [pid 3115:tid 3115] [cli ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:23:18.166613 2026] [security2:error] [pid 3115:tid 3115] [client 88.186.185.18:50290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||utilis.net|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "utilis.net"] [uri "/"] [unique_id "atFgZoyuH5g1QUHSpReqVQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 19:36:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:36:16.935899 2026] [security2:error] [pid 9302:tid 9302] [cli ...
show more
(mod_security) mod_security (id:210831) triggered by 88.186.185.18 (88-186-185-18.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:36:16.935899 2026] [security2:error] [pid 9302:tid 9302] [client 88.186.185.18:50159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||janton.com|F|4"] [data "ContactBot/"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "janton.com"] [uri "/"] [unique_id "as_ZsOngZmgwe5aBfsOMBwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
