🇺🇸
TPI-Abuse
2026-11-08 04:48:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:47:59.707752 2026] [security2:error] [pid 21938:tid 21938] [clien ...
show more
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:47:59.707752 2026] [security2:error] [pid 21938:tid 21938] [client 103.177.124.9:57886] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bostonlog.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bostonlog.com"] [uri "/favorites"] [unique_id "au_-_6gZY7Is7C_1dUt_FwAAABw"], referer: https://bostonlog.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
bmino.pl
2026-10-19 07:05:12
UTC ·
(3 weeks ago)
Autoban IP(2): 103.177.124.9 - Hostname: EarthTelecommunication - City: Sātkhira - Country: Bangladesh - Organization: AS63969 Race Online Limited - Reason: GET /?v=eea38fyi7672beudrz HTTP/1.1
Web App Attack
🇪🇸
librebit
2026-10-14 02:19:01
UTC ·
(3 weeks ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-13 10:47:49
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:47:43.859426 2026] [security2:error] [pid 9714:tid 9714] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:47:43.859426 2026] [security2:error] [pid 9714:tid 9714] [client 103.177.124.9:57372] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||srossi.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "srossi.net"] [uri "/2007/04/notoften.html"] [unique_id "as4MTyS5Dq0T-I21kdp0IgAAAAY"], referer: https://ladunata.blogspot.com/2007/04/funny-pictures.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-13 03:20:32
UTC ·
(3 weeks ago)
Shop search flood (L7 DDoS) | path: /180-meilleur-velo-entre-1000-et-2000-euros | query: order=product.price.desc&productListView=list&q=Taille-XXS | src_port: 53510 | 2026-10-13 03:20 UTC
DDoS Attack
Web App Attack
🇩🇪
LRob
2026-10-08 18:23:42
UTC ·
(1 month ago)
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 | 2026-10-08 18:23 UTC
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 07:04:46
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 03:04:38.565513 2026] [security2:error] [pid 6036:tid 6036] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 103.177.124.9 (103.177.124.9.race.net.bd): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 03:04:38.565513 2026] [security2:error] [pid 6036:tid 6036] [client 103.177.124.9:33138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||maprada92.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maprada92.com"] [uri "/"] [unique_id "asdAhqKafnHzOXaUSqQNzwAAABk"], referer: https://highqualitylink.shop/dir/google-ranking-backlinks-130023
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-07 10:24:00
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=48&topics%5B4%5D=66&topics%5B5%5D=38&topics%5B6%5D=27 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=48&topics%5B4%5D=66&topics%5B5%5D=38&topics%5B6%5D=27 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2026-10-04 14:58:24
UTC ·
(1 month ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
鬼影233
2026-10-02 08:18:52
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 10:59:38
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-29 14:03:27
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-27 08:07:48
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
LRob
2026-09-25 20:29:48
UTC ·
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /sitemap.xml | 2026-09-25 20:29 UTC
show less
Bad Web Bot
🇺🇸
SX Communications
2026-09-24 10:07:16
UTC ·
(1 month ago)
HTTP application-layer DoS / botnet traffic from 103.177.124.9: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
