🇺🇸
TPI-Abuse
2026-11-14 06:19:10
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:19:06.361779 2026] [security2:error] [pid 6732:tid 6740] [client 151.240.64.236:43835] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:19:06.361779 2026] [security2:error] [pid 6732:tid 6740] [client 151.240.64.236:43835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.lancasterdesignercraftsmen.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.lancasterdesignercraftsmen.org"] [uri "/robots.txt"] [unique_id "avf9Wjjt3Dcg8DReGEiucwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-14 01:50:49
UTC ·
(5 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 16:40:42
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:40:38.252645 2026] [security2:error] [pid 1188608:tid 1188608] [client 151.240.64.236:29 ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:40:38.252645 2026] [security2:error] [pid 1188608:tid 1188608] [client 151.240.64.236:29389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.tobyjohnson.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.tobyjohnson.com"] [uri "/robots.txt"] [unique_id "avc9hstCDgOUtFL8zM5U4QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:53:17
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:53:13.855898 2026] [security2:error] [pid 14711:tid 14711] [client 151.240.64.236:41191] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:53:13.855898 2026] [security2:error] [pid 14711:tid 14711] [client 151.240.64.236:41191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.exhaustthelimits.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.exhaustthelimits.org"] [uri "/robots.txt"] [unique_id "avbsGSqjhmwLIx6wDJ1AbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 04:30:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:30:45.304737 2026] [security2:error] [pid 24689:tid 24689] [client 151.240.64.236:41851] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:30:45.304737 2026] [security2:error] [pid 24689:tid 24689] [client 151.240.64.236:41851] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.butkiewiczfamilyfarm.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.butkiewiczfamilyfarm.com"] [uri "/robots.txt"] [unique_id "avaSdW_HBjGvCib_QugUTgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-12 23:48:05
UTC ·
(1 day ago)
[12/Nov/2026:18:47:59.405085 --0500] avZQLzOxfWBXhNIf2lE3swAAABU 151.240.64.236 38492 205.233.18.17 7081
[12/Nov/2026:18:47:59.899786 --0500] avZQLzOxfWBXhNIf2lE3uQAAAAk 151.240.64.236 38572 205.233.18.17 7081
[12/Nov/2026:18:48:01.981881 --0500] avZ ...
show more
[12/Nov/2026:18:47:59.405085 --0500] avZQLzOxfWBXhNIf2lE3swAAABU 151.240.64.236 38492 205.233.18.17 7081
[12/Nov/2026:18:47:59.899786 --0500] avZQLzOxfWBXhNIf2lE3uQAAAAk 151.240.64.236 38572 205.233.18.17 7081
[12/Nov/2026:18:48:01.981881 --0500] avZQMTOxfWBXhNIf2lE3vQAAABI 151.240.64.236 38590 205.233.18.17 7081
[12/Nov/2026:18:48:04.088695 --0500] avZQNDOxfWBXhNIf2lE3wgAAAAo 151.240.64.236 38644 205.233.18.17 7081
[12/Nov/2026:18:48:05.034831 --0500] avZQNVfD4nS2V7U39dRmSgAAAEw 151.240.64.236 38648 205.233.18.17 7081
...
show less
Hacking
🇺🇸
TPI-Abuse
2026-11-12 16:30:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:30:33.885016 2026] [security2:error] [pid 4215:tid 4215] [client 151.240.64.236:25543] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:30:33.885016 2026] [security2:error] [pid 4215:tid 4215] [client 151.240.64.236:25543] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.saltcityprint.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.saltcityprint.com"] [uri "/robots.txt"] [unique_id "avXpqUpiYlC4RIOwg-xClwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 19:56:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:56:02.992663 2026] [security2:error] [pid 20362:tid 20362] [client 151.240.64.236:59911] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:56:02.992663 2026] [security2:error] [pid 20362:tid 20362] [client 151.240.64.236:59911] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.horneman.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.horneman.org"] [uri "/robots.txt"] [unique_id "avTIUo_K8KAVXuPInPj8kAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:09:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:08:57.570500 2026] [security2:error] [pid 5471:tid 5471] [client 151.240.64.236:29129] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:08:57.570500 2026] [security2:error] [pid 5471:tid 5471] [client 151.240.64.236:29129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.horizontravelgroup.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.horizontravelgroup.com"] [uri "/robots.txt"] [unique_id "avSvOf4_N5UTIGTcL-1wbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 17:48:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:48:28.405204 2026] [security2:error] [pid 27270:tid 27270] [client 151.240.64.236:43101] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:48:28.405204 2026] [security2:error] [pid 27270:tid 27270] [client 151.240.64.236:43101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.beach98.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.beach98.com"] [uri "/robots.txt"] [unique_id "avSqbP6XG4ph8UU3WJKPbgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 15:07:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:07:15.194796 2026] [security2:error] [pid 23527:tid 23527] [client 151.240.64.236:52407] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:07:15.194796 2026] [security2:error] [pid 23527:tid 23527] [client 151.240.64.236:52407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.moellerlaw.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.moellerlaw.com"] [uri "/robots.txt"] [unique_id "avSEo3YcboN2NOAURd6--gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
initsol
2026-11-11 06:07:00
UTC ·
(3 days ago)
[Wed Nov 11 07:06:55.254243 2026] [authz_core:error] [pid 2647494:tid 2647494] [client 151.240.64.236:56449] AH01630: client denied by server configuration: /var/www/robots.txt
[Wed Nov 11 07:06:55.981529 2026] [authz_core:error] [pid 2622593:tid 262 ...
show more
[Wed Nov 11 07:06:55.254243 2026] [authz_core:error] [pid 2647494:tid 2647494] [client 151.240.64.236:56449] AH01630: client denied by server configuration: /var/www/robots.txt
[Wed Nov 11 07:06:55.981529 2026] [authz_core:error] [pid 2622593:tid 2622593] [client 151.240.64.236:55213] AH01630: client denied by server configuration: /var/www/
[Wed Nov 11 07:07:00.332534 2026] [authz_core:error] [pid 2622595:tid 2622595] [client 151.240.64.236:63099] AH01630: client denied by server configuration: /var/www/
...
show less
Brute-Force
🇩🇪
IVski.com
2026-11-11 04:32:13
UTC ·
(3 days ago)
IVski WAF | Banner grab scan - zgrab probing service fingerprint
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-11 02:07:17
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:07:13.664632 2026] [security2:error] [pid 19177:tid 19177] [client 151.240.64.236:32201] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 21:07:13.664632 2026] [security2:error] [pid 19177:tid 19177] [client 151.240.64.236:32201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.ruthmartin.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ruthmartin.org"] [uri "/robots.txt"] [unique_id "avPN0dIqPSZDjrYRh5qMKQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 15:22:41
UTC ·
(3 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:22:36.129729 2026] [security2:error] [pid 4088:tid 4088] [client 151.240.64.236:58755] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.64.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:22:36.129729 2026] [security2:error] [pid 4088:tid 4088] [client 151.240.64.236:58755] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.canebrakes.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.canebrakes.com"] [uri "/robots.txt"] [unique_id "avM2vJJn81lS1VlsPNJOqgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
