🇺🇸
TPI-Abuse
2026-11-11 13:32:44
UTC ·
(11 minutes ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:32:39.422938 2026] [security2:error] [pid 26544:tid 26544] [client 151.240.53.40:35405] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:32:39.422938 2026] [security2:error] [pid 26544:tid 26544] [client 151.240.53.40:35405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.powerlinemultimedia.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.powerlinemultimedia.net"] [uri "/robots.txt"] [unique_id "avRudyb15k7I00VqbiHXKgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:01:16
UTC ·
(43 minutes ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:01:09.914200 2026] [security2:error] [pid 27333:tid 27333] [client 151.240.53.40:54549] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:01:09.914200 2026] [security2:error] [pid 27333:tid 27333] [client 151.240.53.40:54549] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.vanmetermailing.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vanmetermailing.com"] [uri "/robots.txt"] [unique_id "avRnFXZY_r7NCvMVS9ha5AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-11 10:19:00
UTC ·
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 07:34:39
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:34:36.583216 2026] [security2:error] [pid 4577:tid 4597] [client 151.240.53.40:55715] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:34:36.583216 2026] [security2:error] [pid 4577:tid 4597] [client 151.240.53.40:55715] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.asetiadi.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.asetiadi.net"] [uri "/robots.txt"] [unique_id "avQajK9c3_3V8-PzfjpkDwAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 04:17:17
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:17:12.107710 2026] [security2:error] [pid 30334:tid 30334] [client 151.240.53.40:28497] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:17:12.107710 2026] [security2:error] [pid 30334:tid 30334] [client 151.240.53.40:28497] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.lemoulinavent.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.lemoulinavent.org"] [uri "/robots.txt"] [unique_id "avPsSCSBP6sXG_Td9P79ywAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:14:04
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:14:01.107741 2026] [security2:error] [pid 4072:tid 4072] [client 151.240.53.40:29401] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:14:01.107741 2026] [security2:error] [pid 4072:tid 4072] [client 151.240.53.40:29401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.baird.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.baird.net"] [uri "/robots.txt"] [unique_id "avOzSVnqRlymveZQ-ULcfAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-11-10 21:01:09
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Email Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 16:04:59
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:04:50.089735 2026] [security2:error] [pid 13349:tid 13349] [client 151.240.53.40:29071] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:04:50.089735 2026] [security2:error] [pid 13349:tid 13349] [client 151.240.53.40:29071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.interartny.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.interartny.com"] [uri "/robots.txt"] [unique_id "avNAopzh_DtvvbNGVqHmdgAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 14:35:27
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:35:22.711457 2026] [security2:error] [pid 30798:tid 30798] [client 151.240.53.40:41015] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:35:22.711457 2026] [security2:error] [pid 30798:tid 30798] [client 151.240.53.40:41015] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.agchurchkuwait.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.agchurchkuwait.com"] [uri "/robots.txt"] [unique_id "avMrqmJh31W2alDjbTwW9QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:02:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:01:58.722726 2026] [security2:error] [pid 11028:tid 11028] [client 151.240.53.40:43081] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:01:58.722726 2026] [security2:error] [pid 11028:tid 11028] [client 151.240.53.40:43081] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jbernsteinpc.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jbernsteinpc.com"] [uri "/robots.txt"] [unique_id "avMHtjkPWTufMf0E8FlhpAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:49:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:49:21.506550 2026] [security2:error] [pid 9323:tid 9323] [client 151.240.53.40:35227] Mod ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:49:21.506550 2026] [security2:error] [pid 9323:tid 9323] [client 151.240.53.40:35227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.images4themind.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.images4themind.com"] [uri "/robots.txt"] [unique_id "avK-cYGVAJzvuHd_FzRr4AAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-11-10 03:12:43
UTC ·
(1 day ago)
Web server path scanning: 15 nonexistent paths requested within a minute.
Web App Attack
🇺🇸
IndigoRidge
2026-11-09 19:04:19
UTC ·
(1 day ago)
[09/Nov/2026:14:04:11.337605 --0500] avIZK@DKfe-b0pRbYd0HgAAAAMQ 151.240.53.40 34464 205.233.18.17 7081
[09/Nov/2026:14:04:11.569256 --0500] avIZKwMjGxmmU9hulmFrmwAAAQo 151.240.53.40 34480 205.233.18.17 7081
[09/Nov/2026:14:04:13.653837 --0500] avIZL ...
show more
[09/Nov/2026:14:04:11.337605 --0500] avIZK@DKfe-b0pRbYd0HgAAAAMQ 151.240.53.40 34464 205.233.18.17 7081
[09/Nov/2026:14:04:11.569256 --0500] avIZKwMjGxmmU9hulmFrmwAAAQo 151.240.53.40 34480 205.233.18.17 7081
[09/Nov/2026:14:04:13.653837 --0500] avIZLWDCQtrTOEMcllSIXQAAAA0 151.240.53.40 34490 205.233.18.17 7081
[09/Nov/2026:14:04:16.345389 --0500] avIZMGDCQtrTOEMcllSIZQAAAAc 151.240.53.40 45874 205.233.18.17 7081
[09/Nov/2026:14:04:16.704971 --0500] avIZMGnovKHndQ6xVmso4wAAAUw 151.240.53.40 45882 205.233.18.17 7081
...
show less
Hacking
🇫🇷
masterguru
2026-11-09 17:26:55
UTC ·
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "panscient" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-09 16:43:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:43:52.129936 2026] [security2:error] [pid 10620:tid 10620] [client 151.240.53.40:31249] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.53.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:43:52.129936 2026] [security2:error] [pid 10620:tid 10620] [client 151.240.53.40:31249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.carefreesol.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.carefreesol.com"] [uri "/robots.txt"] [unique_id "avH4SKzmnu5XLgwhbCfvcQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
