🇺🇸
TPI-Abuse
2026-11-14 05:03:01
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:02:56.227817 2026] [security2:error] [pid 29074:tid 29074] [client 147.90.241.37:42271] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:02:56.227817 2026] [security2:error] [pid 29074:tid 29074] [client 147.90.241.37:42271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wisdomwfo.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wisdomwfo.com"] [uri "/robots.txt"] [unique_id "avfrgFbYo-bBKfDehk6vBQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-14 04:07:01
UTC ·
(2 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,mx01,mx02,mx03,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 02:39:49
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:39:46.788476 2026] [security2:error] [pid 19587:tid 19587] [client 147.90.241.37:26473] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:39:46.788476 2026] [security2:error] [pid 19587:tid 19587] [client 147.90.241.37:26473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.rangejudging.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.rangejudging.com"] [uri "/robots.txt"] [unique_id "avfJ8p0RXZB3ctTrehW6oQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 16:32:09
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:32:05.326569 2026] [security2:error] [pid 9328:tid 9328] [client 147.90.241.37:41355] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:32:05.326569 2026] [security2:error] [pid 9328:tid 9328] [client 147.90.241.37:41355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.renegadestudios.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.renegadestudios.com"] [uri "/robots.txt"] [unique_id "avc7hS_lRbCyIWnEw9VIyQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:36:45
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:36:38.628307 2026] [security2:error] [pid 7428:tid 7428] [client 147.90.241.37:64815] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:36:38.628307 2026] [security2:error] [pid 7428:tid 7428] [client 147.90.241.37:64815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.carlsvoice.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.carlsvoice.com"] [uri "/robots.txt"] [unique_id "avcgdvOaWAJByyIYnb_nLAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:17:13
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:17:06.362561 2026] [security2:error] [pid 3385:tid 3385] [client 147.90.241.37:27861] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:17:06.362561 2026] [security2:error] [pid 3385:tid 3385] [client 147.90.241.37:27861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.happyvalleynh.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.happyvalleynh.org"] [uri "/robots.txt"] [unique_id "avcb4uUKnsPf_u9nEraAegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:01:50
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:01:43.912848 2026] [security2:error] [pid 22242:tid 22242] [client 147.90.241.37:56887] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:01:43.912848 2026] [security2:error] [pid 22242:tid 22242] [client 147.90.241.37:56887] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.hertzan.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.hertzan.com"] [uri "/robots.txt"] [unique_id "avcYR7eq1ROYtBD4M-XG9gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 07:09:42
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:09:35.217455 2026] [security2:error] [pid 4793:tid 4793] [client 147.90.241.37:62467] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 02:09:35.217455 2026] [security2:error] [pid 4793:tid 4793] [client 147.90.241.37:62467] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.thevillageartcenter.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.thevillageartcenter.com"] [uri "/robots.txt"] [unique_id "ava3rxJ7fJDQS1ZThjKl9AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cg-design.co.uk
2026-11-12 21:24:44
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 147.90.241.37 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-12 19:45:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:45:03.993711 2026] [security2:error] [pid 631:tid 631] [client 147.90.241.37:51955] ModSe ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:45:03.993711 2026] [security2:error] [pid 631:tid 631] [client 147.90.241.37:51955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.vzan.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vzan.org"] [uri "/robots.txt"] [unique_id "avYXP7i5Vzt2RVgVwDa0QgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:38:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:38:20.225291 2026] [security2:error] [pid 16320:tid 16320] [client 147.90.241.37:22639] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:38:20.225291 2026] [security2:error] [pid 16320:tid 16320] [client 147.90.241.37:22639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.h-vpastoralcharge.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.h-vpastoralcharge.org"] [uri "/robots.txt"] [unique_id "avYHnIt3Zq250_i2lQAvJgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:09:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:09:30.642063 2026] [security2:error] [pid 9714:tid 9714] [client 147.90.241.37:47737] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:09:30.642063 2026] [security2:error] [pid 9714:tid 9714] [client 147.90.241.37:47737] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.studioyau.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.studioyau.com"] [uri "/robots.txt"] [unique_id "avXkuqjyyOvYBrUh9kTuOAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:48:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:48:19.554926 2026] [security2:error] [pid 9180:tid 9207] [client 147.90.241.37:40963] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:48:19.554926 2026] [security2:error] [pid 9180:tid 9207] [client 147.90.241.37:40963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.thompsonhypnotherapy.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.thompsonhypnotherapy.com"] [uri "/robots.txt"] [unique_id "avXfw8LfJf8v-1dQ7uDKGwAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 15:00:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:00:39.885799 2026] [security2:error] [pid 2529:tid 2529] [client 147.90.241.37:22119] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 10:00:39.885799 2026] [security2:error] [pid 2529:tid 2529] [client 147.90.241.37:22119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.owenbee.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.owenbee.com"] [uri "/robots.txt"] [unique_id "avXUl8rV5sjzapPT5jm2gAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-11-12 12:46:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.37 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Email Spam
Web App Attack
