🇺🇸
TPI-Abuse
2026-11-11 11:53:25
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:53:17.904248 2026] [security2:error] [pid 30741:tid 30741] [client 151.240.53.240:55913] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:53:17.904248 2026] [security2:error] [pid 30741:tid 30741] [client 151.240.53.240:55913] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.intermixx.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.intermixx.com"] [uri "/robots.txt"] [unique_id "avRXLZBFIicv4jVR1c8bJQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 09:26:53
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:26:49.748436 2026] [security2:error] [pid 11608:tid 11608] [client 151.240.53.240:46033] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:26:49.748436 2026] [security2:error] [pid 11608:tid 11608] [client 151.240.53.240:46033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.powerkiteforum.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.powerkiteforum.com"] [uri "/robots.txt"] [unique_id "avQ02Sk6NPG8hM9OlvUtKAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-11 06:00:35
UTC ·
(23 hours ago)
[11/Nov/2026:01:00:30.428585 --0500] avQEfjUHBHN7RLWyHlHPrAAAABE 151.240.53.240 47136 205.233.18.17 7081
[11/Nov/2026:01:00:30.775292 --0500] avQEfj89Q8mXmRFUYfXBjQAAARE 151.240.53.240 47140 205.233.18.17 7081
[11/Nov/2026:01:00:31.933073 --0500] avQ ...
show more
[11/Nov/2026:01:00:30.428585 --0500] avQEfjUHBHN7RLWyHlHPrAAAABE 151.240.53.240 47136 205.233.18.17 7081
[11/Nov/2026:01:00:30.775292 --0500] avQEfj89Q8mXmRFUYfXBjQAAARE 151.240.53.240 47140 205.233.18.17 7081
[11/Nov/2026:01:00:31.933073 --0500] avQEfzUHBHN7RLWyHlHPrgAAAA4 151.240.53.240 47194 205.233.18.17 7081
[11/Nov/2026:01:00:32.108567 --0500] avQEgKJ71efgW0VyFqDKwQAAAJg 151.240.53.240 47198 205.233.18.17 7081
[11/Nov/2026:01:00:33.383444 --0500] avQEgT89Q8mXmRFUYfXBkQAAAQo 151.240.53.240 47262 205.233.18.17 7081
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-11-10 09:44:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:44:38.903761 2026] [security2:error] [pid 13124:tid 13124] [client 151.240.53.240:61019] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:44:38.903761 2026] [security2:error] [pid 13124:tid 13124] [client 151.240.53.240:61019] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.messengersforchrist.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.messengersforchrist.com"] [uri "/robots.txt"] [unique_id "avLnhnJjzqThN9bWLiQBrQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2026-11-10 06:11:02
UTC ·
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:38:57
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:38:50.100942 2026] [security2:error] [pid 26380:tid 26380] [client 151.240.53.240:22997] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:38:50.100942 2026] [security2:error] [pid 26380:tid 26380] [client 151.240.53.240:22997] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.weismanovens.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.weismanovens.com"] [uri "/robots.txt"] [unique_id "avKDulhQQ-15Yte08a4QVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-09 16:24:26
UTC ·
(2 days ago)
[09/Nov/2026:11:24:19.730246 --0500] avHzs9PvJ3hVn6j37gUA2AAAAIk 151.240.53.240 60020 205.233.18.19 7081
[09/Nov/2026:11:24:20.003295 --0500] avHztAMjGxmmU9hulmFUmQAAARg 151.240.53.240 60032 205.233.18.19 7081
[09/Nov/2026:11:24:22.670515 --0500] avH ...
show more
[09/Nov/2026:11:24:19.730246 --0500] avHzs9PvJ3hVn6j37gUA2AAAAIk 151.240.53.240 60020 205.233.18.19 7081
[09/Nov/2026:11:24:20.003295 --0500] avHztAMjGxmmU9hulmFUmQAAARg 151.240.53.240 60032 205.233.18.19 7081
[09/Nov/2026:11:24:22.670515 --0500] avHztpE3gqiuMWDteJwrFQAAAE4 151.240.53.240 60034 205.233.18.19 7081
[09/Nov/2026:11:24:24.130059 --0500] avHzuGDCQtrTOEMcllRzuwAAAAA 151.240.53.240 60044 205.233.18.19 7081
[09/Nov/2026:11:24:25.239908 --0500] avHzuZE3gqiuMWDteJwrFwAAAFA 151.240.53.240 60064 205.233.18.19 7081
...
show less
Hacking
🇺🇸
IndigoRidge
2026-11-09 15:16:14
UTC ·
(2 days ago)
[09/Nov/2026:10:16:07.831727 --0500] avHjt2DCQtrTOEMcllRnjwAAABE 151.240.53.240 58754 205.233.18.17 7080
[09/Nov/2026:10:16:08.847742 --0500] avHjuGnovKHndQ6xVmsPSwAAAUQ 151.240.53.240 58760 205.233.18.17 7080
[09/Nov/2026:10:16:11.391835 --0500] avH ...
show more
[09/Nov/2026:10:16:07.831727 --0500] avHjt2DCQtrTOEMcllRnjwAAABE 151.240.53.240 58754 205.233.18.17 7080
[09/Nov/2026:10:16:08.847742 --0500] avHjuGnovKHndQ6xVmsPSwAAAUQ 151.240.53.240 58760 205.233.18.17 7080
[09/Nov/2026:10:16:11.391835 --0500] avHjuwMjGxmmU9hulmFPRgAAAQI 151.240.53.240 58766 205.233.18.17 7080
[09/Nov/2026:10:16:11.893709 --0500] avHjuwMjGxmmU9hulmFPRwAAAQU 151.240.53.240 58772 205.233.18.17 7080
[09/Nov/2026:10:16:13.937714 --0500] avHjvZE3gqiuMWDteJwjZQAAAE4 151.240.53.240 58784 205.233.18.17 7080
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-11-09 13:27:13
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:27:08.663501 2026] [security2:error] [pid 18087:tid 18087] [client 151.240.53.240:50469] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:27:08.663501 2026] [security2:error] [pid 18087:tid 18087] [client 151.240.53.240:50469] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.harwoodmechanical.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.harwoodmechanical.com"] [uri "/robots.txt"] [unique_id "avHKLLalhg2zCXeWhK9LWQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:27:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:27:10.391828 2026] [security2:error] [pid 16303:tid 16303] [client 151.240.53.240:30029] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:27:10.391828 2026] [security2:error] [pid 16303:tid 16303] [client 151.240.53.240:30029] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cabrynpoodles.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cabrynpoodles.com"] [uri "/robots.txt"] [unique_id "avGR7sjD2J1cMCNtj946kQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 07:26:27
UTC ·
(2 days ago)
Web attack blocked by WAF: GET /robots.txt x2, GET /eleman-arayanlar/cayirova/, GET /is-arayanlar/izmit/ (Rogue web site crawler).
[09/Nov/2026:10:25:48 +0300] "GET /robots.txt HTTP/1.1" UA="panscient.com" -> Rogue web site crawler
[09/Nov/2026:10:25 ...
show more
Web attack blocked by WAF: GET /robots.txt x2, GET /eleman-arayanlar/cayirova/, GET /is-arayanlar/izmit/ (Rogue web site crawler).
[09/Nov/2026:10:25:48 +0300] "GET /robots.txt HTTP/1.1" UA="panscient.com" -> Rogue web site crawler
[09/Nov/2026:10:25:49 +0300] "GET /robots.txt HTTP/1.1" UA="panscient.com" -> Rogue web site crawler
[09/Nov/2026:10:26:14 +0300] "GET /eleman-arayanlar/cayirova/ HTTP/1.1" UA="panscient.com" -> Rogue web site crawler
[09/Nov/2026:10:26:25 +0300] "GET /is-arayanlar/izmit/ HTTP/1.1" UA="panscient.com" -> Rogue web site crawler
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:28:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:28:23.743932 2026] [security2:error] [pid 1676:tid 1676] [client 151.240.53.240:55489] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:28:23.743932 2026] [security2:error] [pid 1676:tid 1676] [client 151.240.53.240:55489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.relationshipecology.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.relationshipecology.com"] [uri "/robots.txt"] [unique_id "avE911a3c3qFV625G7YTcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:59:34
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:59:27.301456 2026] [security2:error] [pid 15330:tid 15343] [client 151.240.53.240:32957] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:59:27.301456 2026] [security2:error] [pid 15330:tid 15343] [client 151.240.53.240:32957] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||paidsearchconsulting.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "paidsearchconsulting.com"] [uri "/"] [unique_id "avEa7w89GyEgkkcQpTOewAAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:23:44
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:23:41.377676 2026] [security2:error] [pid 10088:tid 10214] [client 151.240.53.240:62505] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:23:41.377676 2026] [security2:error] [pid 10088:tid 10214] [client 151.240.53.240:62505] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.tierrasolymar.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tierrasolymar.com"] [uri "/robots.txt"] [unique_id "avCwHRZ1sdXLJv1SjevcDgAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 08:02:44
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:02:41.154548 2026] [security2:error] [pid 10258:tid 10258] [client 151.240.53.240:26247] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:02:41.154548 2026] [security2:error] [pid 10258:tid 10258] [client 151.240.53.240:26247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.mitnikarch.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mitnikarch.com"] [uri "/robots.txt"] [unique_id "avAsoU_wi_Ua1AEv8GkxvQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack