🇺🇸
TPI-Abuse
2026-11-14 10:32:10
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:32:04.355390 2026] [security2:error] [pid 2060:tid 2086] [client 151.240.93.202:56297] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:32:04.355390 2026] [security2:error] [pid 2060:tid 2086] [client 151.240.93.202:56297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.nextlevelpsych.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.nextlevelpsych.com"] [uri "/robots.txt"] [unique_id "avg4pOOGRjePUzhoDRqhgwAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-14 03:08:50
UTC ·
(11 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 16:27:25
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:27:19.337561 2026] [security2:error] [pid 4575:tid 4575] [client 151.240.93.202:58933] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:27:19.337561 2026] [security2:error] [pid 4575:tid 4575] [client 151.240.93.202:58933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.brevardzen.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.brevardzen.org"] [uri "/robots.txt"] [unique_id "avc6Z54uQAJEnJZrKRMAPgAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 15:49:57
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:49:50.222250 2026] [security2:error] [pid 7330:tid 7330] [client 151.240.93.202:26173] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:49:50.222250 2026] [security2:error] [pid 7330:tid 7330] [client 151.240.93.202:26173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dunbartonucc.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dunbartonucc.org"] [uri "/robots.txt"] [unique_id "avcxnmz749f_uz1Fk6shjwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:13:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:12:55.380283 2026] [security2:error] [pid 24660:tid 24660] [client 151.240.93.202:44907] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:12:55.380283 2026] [security2:error] [pid 24660:tid 24660] [client 151.240.93.202:44907] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dd214chronicle.org|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dd214chronicle.org"] [uri "/robots.txt"] [unique_id "avca52yg7AKyI6nF5xIOwgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Visualizes
2026-11-13 13:25:00
UTC ·
(1 day ago)
ModSecurity hits exceeded
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:33:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:33:46.249749 2026] [security2:error] [pid 17453:tid 17453] [client 151.240.93.202:29313] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:33:46.249749 2026] [security2:error] [pid 17453:tid 17453] [client 151.240.93.202:29313] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gpusa-ca.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gpusa-ca.com"] [uri "/robots.txt"] [unique_id "avb1mtSAdB9-pZNqgic-4wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-11-13 02:06:31
UTC ·
(1 day ago)
Web scanning / probing for vulnerable paths | URL: /detail_1.php?content_id=1350174 | Evidence: alcoaviagens.com 151.240.93.202 - - [13/Nov/2026:03:04:30 +0100] \"GET /detail_1.php?content_id=1350174 HTTP/1.1\" 404 22985 \"-\" \"panscient.com\" GEOIP ...
show more
Web scanning / probing for vulnerable paths | URL: /detail_1.php?content_id=1350174 | Evidence: alcoaviagens.com 151.240.93.202 - - [13/Nov/2026:03:04:30 +0100] \"GET /detail_1.php?content_id=1350174 HTTP/1.1\" 404 22985 \"-\" \"panscient.com\" GEOIP_COUNTRY_CODE=US 24730 | ASN: GSL Networks Pty LTD | Country: US
show less
Port Scan
Web App Attack
2026-11-12 21:43:39
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-12 18:26:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:26:10.794226 2026] [security2:error] [pid 27037:tid 27037] [client 151.240.93.202:38089] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:26:10.794226 2026] [security2:error] [pid 27037:tid 27037] [client 151.240.93.202:38089] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.cephedanisman.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.cephedanisman.com"] [uri "/robots.txt"] [unique_id "avYEwn1GnZfa9_xin4yEVwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DocNetzwerk
2026-11-12 18:17:06
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 151.240.93.202 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-12 08:28:11
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:28:03.744205 2026] [security2:error] [pid 17282:tid 17282] [client 151.240.93.202:32995] ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:28:03.744205 2026] [security2:error] [pid 17282:tid 17282] [client 151.240.93.202:32995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.gowithevergreen.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.gowithevergreen.com"] [uri "/robots.txt"] [unique_id "avV4k3M8UivEyeMO70WDGQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-12 06:50:13
UTC ·
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 02:07:29
UTC ·
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:07:26.305035 2026] [security2:error] [pid 3793:tid 3793] [client 151.240.93.202:56709] M ...
show more
(mod_security) mod_security (id:210831) triggered by 151.240.93.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:07:26.305035 2026] [security2:error] [pid 3793:tid 3793] [client 151.240.93.202:56709] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.vicchorus.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.vicchorus.com"] [uri "/robots.txt"] [unique_id "avUfXrhgcmZ4CTkGMsuxzgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-12 01:51:46
UTC ·
(2 days ago)
Bad Web Bot
