🇧🇷
ICS Labs
2026-11-12 14:39:45
UTC ·
(22 hours ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-12 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-11-12 01:51:35
UTC ·
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-11-11 23:42:06
UTC ·
(1 day ago)
[Thu Nov 12 00:42:06.469055 2026] [authz_core:error] [pid 3195837] [client 147.90.241.72:64529] AH01630: client denied by server configuration: /home/vufind.net/public_html/robots.txt
...
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-11 19:20:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:20:54.591147 2026] [security2:error] [pid 19129:tid 19129] [client 147.90.241.72:35701] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:20:54.591147 2026] [security2:error] [pid 19129:tid 19129] [client 147.90.241.72:35701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wcvfr.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wcvfr.org"] [uri "/robots.txt"] [unique_id "avTAFvMVVcSirWzrvLHBtwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ChamberofCommerce.com
2026-11-11 18:18:32
UTC ·
(1 day ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
Bad Web Bot
🇨🇭
backslash
2026-11-11 17:27:00
UTC ·
(1 day ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-11 17:16:16
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:16:09.153490 2026] [security2:error] [pid 5428:tid 5452] [client 147.90.241.72:46707] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:16:09.153490 2026] [security2:error] [pid 5428:tid 5452] [client 147.90.241.72:46707] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.daviscountyossr.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.daviscountyossr.org"] [uri "/robots.txt"] [unique_id "avSi2X3uJwew08W6xl0iHgAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 17:00:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:00:50.355771 2026] [security2:error] [pid 18131:tid 18131] [client 147.90.241.72:28125] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:00:50.355771 2026] [security2:error] [pid 18131:tid 18131] [client 147.90.241.72:28125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.stage15.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stage15.com"] [uri "/robots.txt"] [unique_id "avSfQnV7kYqCNtgvuycipgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 14:28:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:28:18.032351 2026] [security2:error] [pid 25397:tid 25397] [client 147.90.241.72:40079] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:28:18.032351 2026] [security2:error] [pid 25397:tid 25397] [client 147.90.241.72:40079] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cms2020.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cms2020.com"] [uri "/robots.txt"] [unique_id "avR7ggJkfc4-fehLiued3gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:36:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:36:05.737048 2026] [security2:error] [pid 22327:tid 22327] [client 147.90.241.72:61077] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:36:05.737048 2026] [security2:error] [pid 22327:tid 22327] [client 147.90.241.72:61077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.btsalesrep.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.btsalesrep.com"] [uri "/robots.txt"] [unique_id "avRvRSGAGyYjHT-5PcFjsAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:27:42
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:27:34.906174 2026] [security2:error] [pid 17746:tid 17746] [client 147.90.241.72:37419] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:27:34.906174 2026] [security2:error] [pid 17746:tid 17746] [client 147.90.241.72:37419] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.woodburymeadows.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.woodburymeadows.org"] [uri "/robots.txt"] [unique_id "avRDFpDMO947E7jdy7INZwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cg-design.co.uk
2026-11-11 09:01:31
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 147.90.241.72 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-11 04:57:44
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:57:36.382420 2026] [security2:error] [pid 9886:tid 9886] [client 147.90.241.72:65059] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:57:36.382420 2026] [security2:error] [pid 9886:tid 9886] [client 147.90.241.72:65059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.colbygrenier.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.colbygrenier.com"] [uri "/robots.txt"] [unique_id "avP1wFYnWyRU2ubI-3jYRQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 02:16:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:16:45.057581 2026] [security2:error] [pid 29780:tid 29780] [client 147.90.241.72:45797] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:16:45.057581 2026] [security2:error] [pid 29780:tid 29780] [client 147.90.241.72:45797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gdpeters.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gdpeters.com"] [uri "/robots.txt"] [unique_id "avPQDSXWJfGlJJ3ptiZzhwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:02:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:02:16.828784 2026] [security2:error] [pid 21293:tid 21293] [client 147.90.241.72:42637] M ...
show more
(mod_security) mod_security (id:210831) triggered by 147.90.241.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:02:16.828784 2026] [security2:error] [pid 21293:tid 21293] [client 147.90.241.72:42637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.swurgentvet.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.swurgentvet.com"] [uri "/robots.txt"] [unique_id "avOwiOS_j0LdMpviDi6FGwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
