🇺🇸
kosada.com
2026-06-29 11:54:25
(2 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
Vegascosmetics
2026-06-23 15:29:57
(1 week ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇩🇪
EGP Abuse Dept
2026-06-22 09:22:03
(1 week ago)
Scraping webshop URLs (creall.com), likely botnet drone
Bad Web Bot
Exploited Host
🇰🇷
zlhIcd
2026-06-20 05:16:43
(1 week ago)
103.186.34.254 - - [16/Jun/2026:05:12:08 +0900] "GET /pcwiki/index.php?days=30&from=20251125192621&h ...
show more
103.186.34.254 - - [16/Jun/2026:05:12:08 +0900] "GET /pcwiki/index.php?days=30&from=20251125192621&hideanons=1&hideminor=1&limit=100&target=%EB%A7%88%ED%81%AC&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.6834.110 Safari/537.36"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack
2026-06-18 23:45:16
(1 week ago)
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index/add/product/10947/form_key/Dx4zVTBaoCdISDjm/ | UA: Opera/9.14.(X11; Linux i686; ka-GE) Presto/2.9.190 Version/11.00 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-06-17 22:14:31
(2 weeks ago)
[Thu Jun 18 05:14:27.957753 2026] [security2:error] [pid 2070673:tid 139897626089152] [client 103.18 ...
show more
[Thu Jun 18 05:14:27.957753 2026] [security2:error] [pid 2070673:tid 139897626089152] [client 103.186.34.254:51107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php"] [unique_id "ajMcQylvg4BzMDaBVHtaHgAAQRE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[2070718] [rQIIYjoy5Iw] [ajMcQylvg4BzMDaBVHtaHgAAQRE] keep_alive=[1] [2026-06-18 05:14:27.957757] [R:ajMcQylvg4BzMDaBVHtaHgAAQRE] UA:'Mozilla/5.0 (Linux; Android 8.0.0; SM-J330G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36 EdgA/114.0.1823.74' Host:'stakl
...
show less
Email Spam
Hacking
🇩🇪
pltcldvlpr
2026-06-14 18:03:37
(2 weeks ago)
Bogus Useragent: 103.186.34.254 - - [14/Jun/2026:14:26:52 +0200] "GET /protocol?id=bb_4_86¶graph ...
show more
Bogus Useragent: 103.186.34.254 - - [14/Jun/2026:14:26:52 +0200] "GET /protocol?id=bb_4_86¶graph=207362&seq=95 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows 98; Trident/4.1)" asn=149687 org="PT Syawal Atlantik System" country=ID
...
show less
Bad Web Bot
🇪🇸
el-brujo
2026-06-02 14:52:40
(4 weeks ago)
Cloudflare WAF: Request Path: /programacion_vb/virtual_file_api_redirection_source-t219851.0.html Re ...
show more
Cloudflare WAF: Request Path: /programacion_vb/virtual_file_api_redirection_source-t219851.0.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 10.0; Trident/5.0) Action: log Source: firewallManaged ASN Description: PT Syawal Atlantik System Country: ID Method: GET Timestamp: 2026-06-02T14:52:40Z ruleId: 017d4edd6754438087991348543c4667. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
MPL
2026-05-23 00:50:10
(1 month ago)
tcp/23
Port Scan
2026-05-11 12:28:10
(1 month ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇦🇺
MAGIC
2026-03-18 00:06:49
(3 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
matt
2026-03-04 01:53:56
(3 months ago)
DDOS attack with query parameters attempting to overload WordPress site.
DDoS Attack
🇳🇱
EGP Abuse Dept
2026-03-01 11:33:03
(4 months ago)
Scraping webshop URLs (www.dewijs-3d.com), likely botnet drone
Bad Web Bot
Exploited Host
🇸🇪
Johan Finn
2026-02-11 14:50:03
(4 months ago)
malicious activity
Web App Attack
2026-01-11 05:59:54
(5 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host