2026-11-06 04:15:04
UTC ·
(8 hours ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Blocked by User-Agent Filter (Bad Bot Pattern: MSIE 7.): Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/5.0) | UA: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.0; Trident/5.0) | (Magento Site)
show less
Hacking
Bad Web Bot
🇩🇪
LRob
2026-11-04 07:29:43
UTC ·
(2 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /en | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-04 01:07:28
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 102.251.0.12 (8ta-251-0-12.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 21:07:22.000354 2026] [security2:error] [pid 22855:tid 22855] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 102.251.0.12 (8ta-251-0-12.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 21:07:22.000354 2026] [security2:error] [pid 22855:tid 22855] [client 102.251.0.12:37491] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gellertdealers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gellertdealers.com"] [uri "/"] [unique_id "asGmyeiCwBFqrMEAWpaYEQAAACI"], referer: https://freedofollowbacklinks.website/dir/seo-link-building-services-80007
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 03:22:53
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 102.251.0.12 (8ta-251-0-12.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 23:22:44.969320 2026] [security2:error] [pid 17899:tid 17899] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 102.251.0.12 (8ta-251-0-12.telkomadsl.co.za): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 23:22:44.969320 2026] [security2:error] [pid 17899:tid 17899] [client 102.251.0.12:39357] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tatethegreat.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tatethegreat.com"] [uri "/"] [unique_id "ar8jhIJEyZOk-CIuzuVMUgAAAAc"], referer: https://backlinkspecialist.store/dir/website-ranking-links-204374
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-30 10:51:01
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-25 03:27:50
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-25 01:56:50
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-20 08:01:20
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇸🇰
wirecontrol
2026-09-16 11:59:24
UTC ·
(1 month ago)
SpamScore above: 10.0
Email Spam
🇩🇪
EGP Abuse Dept
2026-07-15 00:03:13
UTC ·
(3 months ago)
Scanning for port/service exploits on tpc-027.mach3builders.nl
Port Scan
Hacking
🇺🇸
kosada.com
2026-06-29 10:13:18
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-03-20 05:17:11
UTC ·
(7 months ago)
2026-03-20T12:17:10.222673+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=102.251.0.12 DST=103.166.156.58 LEN=60 TOS=0x18 PREC=0x20 TTL=49 ID=57821 DF PROTO=TCP SPT=48425 DPT=443 WINDOW ...
show more
2026-03-20T12:17:10.222673+07:00 staklim-malang kernel: Ipt-PREROUCOBA:DROP IN=eth0 OUT= MAC=c4:37:72:f5:bf:f3:90:e2:ba:b3:7b:52:08:00 SRC=102.251.0.12 DST=103.166.156.58 LEN=60 TOS=0x18 PREC=0x20 TTL=49 ID=57821 DF PROTO=TCP SPT=48425 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Email Spam
Hacking
