🇩🇪
nyuuzyou
2026-11-05 13:48:06
UTC ·
(1 day ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T13:48:06Z.
Bad Web Bot
🇨🇭
ALPHANET
2026-10-29 16:55:08
UTC ·
(1 week ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-10-04 03:32:44
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 103.112.52.115 (103-112-52-115.Dhaka.carnival.com.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 23:32:37.414180 2026] [security2:error] [pid 22567:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.112.52.115 (103-112-52-115.Dhaka.carnival.com.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 23:32:37.414180 2026] [security2:error] [pid 22567:tid 22567] [client 103.112.52.115:53746] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cultureal.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cultureal.com"] [uri "/"] [unique_id "asHI1UKoheH5mOMHBnFZzwAAAAA"], referer: https://localcitations.shop/dir/google-ranking-backlinks-48423
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 11:15:43
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 103.112.52.115 (103-112-52-115.Dhaka.carnival.com.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 07:15:37.102482 2026] [security2:error] [pid 2600:tid 26 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.112.52.115 (103-112-52-115.Dhaka.carnival.com.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 07:15:37.102482 2026] [security2:error] [pid 2600:tid 2600] [client 103.112.52.115:39168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vesalappi.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vesalappi.com"] [uri "/"] [unique_id "asDj2WsvWpRR4uqvkSLH6QAAAAE"], referer: https://linkbuildingtool.website/dir/organic-seo-links-225213
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-02 04:23:47
UTC ·
(1 month ago)
Shop search flood (L7 DDoS) | path: /112-bons-plans-route | query: order=product.position.asc&q=Taille-XXL-L | src_port: 39232
DDoS Attack
Web App Attack
🇺🇸
鬼影233
2026-10-01 13:22:22
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 08:15:49
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
kosada.com
2026-09-30 14:52:32
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=38&topics%5B2%5D=69&topics%5B3%5D=62&topics%5B4%5D=81 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=38&topics%5B2%5D=69&topics%5B3%5D=62&topics%5B4%5D=81 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15")
show less
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 10:28:16
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
2025-11-18 04:59:15
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-15 13:53:52
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇩🇪
pressler.pro
2025-10-20 14:41:45
UTC ·
(1 year ago)
Fail2ban - DDoS attack on woocommerce shop
...
DDoS Attack
🇮🇩
hermawan
2025-10-17 02:19:12
UTC ·
(1 year ago)
[Fri Oct 17 09:16:11.531545 2025] [security2:error] [pid 1687963:tid 139695087310528] [client 103.112.52.115:57130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/core ...
show more
[Fri Oct 17 09:16:11.531545 2025] [security2:error] [pid 1687963:tid 139695087310528] [client 103.112.52.115:57130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 request_line = GET /index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561127-prakiraan-bulanan-curah-hujan-di-kabupaten-kabupaten-malang-kota-malang-dan-kota-batu-untuk-6-bulan-ke-depan HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-curah-hujan-bulanan/6-bulan-ke-depan/555561127-prakiraan-bulanan-curah-hujan-di-kabu
...
show less
Hacking
Web App Attack
🇩🇪
pressler.pro
2025-09-21 23:04:49
UTC ·
(1 year ago)
Fail2ban - DDoS attack on woocommerce shop
...
DDoS Attack
🇨🇭
ALPHANET
2025-09-21 09:40:03
UTC ·
(1 year ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
