2026-10-08 09:23:06
(4 days ago)
FortiWeb WAF: 70 attacks detected. Threat Score: 10000. Types: Client Management(35), Known Bots Det ...
show more
FortiWeb WAF: 70 attacks detected. Threat Score: 10000. Types: Client Management(35), Known Bots Detection(35). Origin: United States.
show less
Bad Web Bot
🇱🇹
Evag Touf
2026-10-08 07:12:14
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 151.240.91.187 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-10-08 05:31:45
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 01:31:37.697065 2026] [security2:error] [pid 2411:tid 2521] [client 151.240.91.187:52655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.bayouwebmaster.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bayouwebmaster.com"] [uri "/robots.txt"] [unique_id "ascquQ-9Bu-yCFv8I2_sywAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 03:52:15
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:52:08.389849 2026] [security2:error] [pid 21533:tid 21533] [client 151.240.91.187:51445] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.wisdomsco.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.wisdomsco.com"] [uri "/robots.txt"] [unique_id "ascTaI5z2R33yeV5L6RWAwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-10-08 02:53:14
(5 days ago)
Domain : letmaz.com
Rule : UserAgent
2026-10-08 02:52:17 ***hidden-privacy*** GET / - 80 - 151.240.9 ...
show more
Domain : letmaz.com
Rule : UserAgent
2026-10-08 02:52:17 ***hidden-privacy*** GET / - 80 - 151.240.91.187 HTTP/1.1 panscient.com - www.letmaz.com 403 0 0 12841 171 300 - -
show less
Port Scan
🇺🇸
mnsf
2026-10-08 00:05:46
(5 days ago)
Request Overload (101)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-07 22:34:57
(5 days ago)
Abusive crawler | ua: panscient.com | path: /robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 21:38:04
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:38:00.289214 2026] [security2:error] [pid 28013:tid 28013] [client 151.240.91.187:39771] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.jresm.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.jresm.net"] [uri "/robots.txt"] [unique_id "asa7uKbaqdirpVEf2aGSHQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 21:05:28
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:05:22.225010 2026] [security2:error] [pid 9193:tid 9193] [client 151.240.91.187:57477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.whiterapperz.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.whiterapperz.com"] [uri "/robots.txt"] [unique_id "asa0EnNp1qnZxskqNEeD3wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 20:07:58
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:07:52.125982 2026] [security2:error] [pid 1518:tid 1518] [client 151.240.91.187:50595] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.aquascapes.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.aquascapes.net"] [uri "/robots.txt"] [unique_id "asammLHmkzqcPXFBNJpBzgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 19:36:48
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 15:36:43.905594 2026] [security2:error] [pid 5417:tid 5417] [client 151.240.91.187:47351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.robschouten.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.robschouten.com"] [uri "/robots.txt"] [unique_id "asafS7p6U2nqCNyBooSopAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-10-07 18:58:21
(5 days ago)
[07/Oct/2026:14:58:16.920431 --0400] asaWSE@F5SZazoguZciM0gAAA1g 151.240.91.187 53672 205.233.18.17 ...
show more
[07/Oct/2026:14:58:16.920431 --0400] asaWSE@F5SZazoguZciM0gAAA1g 151.240.91.187 53672 205.233.18.17 7081
[07/Oct/2026:14:58:17.077507 --0400] asaWSVQgGcBValfmkJtePQAAA5I 151.240.91.187 53696 205.233.18.17 7081
[07/Oct/2026:14:58:18.538579 --0400] asaWSlH4iyNaSSsBnfxcpwAAAZY 151.240.91.187 52022 205.233.18.17 7081
[07/Oct/2026:14:58:19.105300 --0400] asaWS1QgGcBValfmkJteQgAAA4I 151.240.91.187 52040 205.233.18.17 7081
[07/Oct/2026:14:58:21.140998 --0400] asaWTVQgGcBValfmkJteRQAAA4o 151.240.91.187 52100 205.233.18.17 7081
...
show less
Hacking
🇩🇪
ghostwarriors
2026-10-07 18:20:11
(5 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 17:04:55
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 13:04:50.486898 2026] [security2:error] [pid 27638:tid 27638] [client 151.240.91.187:21983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.ggisoft.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ggisoft.com"] [uri "/robots.txt"] [unique_id "asZ7svxfyFuc6sCHJp45TAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 12:19:55
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.91.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:19:48.391734 2026] [security2:error] [pid 7123:tid 7123] [client 151.240.91.187:29033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.sailinghonu.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.sailinghonu.com"] [uri "/robots.txt"] [unique_id "asY45Ip17BZE2Ej9VC8cDQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
