π©πͺ
LRob
2026-10-27 04:03:51
(1 day ago)
Proxynvader botnet: shop search flood (L7 DDoS) | path: /92-vtt-electrique-all-mountain | query: order=product.price.asc&q=Famille-Patron/Mat%C3%A9riau-Aluminium | src_port: 53946 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
Proxynvader botnet: shop search flood (L7 DDoS) | path: /92-vtt-electrique-all-mountain | query: order=product.price.asc&q=Famille-Patron/Mat%C3%A9riau-Aluminium | src_port: 53946 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-25 22:12:19
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 131.72.198.195 (131-72-198-195.henet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 18:12:13.439490 2026] [security2:error] [pid 22160:tid 22171] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 131.72.198.195 (131-72-198-195.henet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 18:12:13.439490 2026] [security2:error] [pid 22160:tid 22171] [client 131.72.198.195:48216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||metropolitanbasel.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "metropolitanbasel.org"] [uri "/"] [unique_id "at5-vbzaQFJ8xNVH_yuYYgAAAIM"], referer: https://njhdyelimfdd.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
kosada.com
2026-10-24 13:21:29
(4 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=43&topics%5B3%5D=30&topics%5B4%5D=69&topics%5B5%5D=55 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=43&topics%5B3%5D=30&topics%5B4%5D=69&topics%5B5%5D=55 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-23 20:21:13
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 131.72.198.195 (131-72-198-195.henet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:21:07.493337 2026] [security2:error] [pid 24276:tid 24276] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 131.72.198.195 (131-72-198-195.henet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:21:07.493337 2026] [security2:error] [pid 24276:tid 24276] [client 131.72.198.195:9585] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||doorofhopechurch.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "doorofhopechurch.org"] [uri "/"] [unique_id "atvBs5fMSlaYdJxUdlVE7wAAABY"], referer: https://crandallfam.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
Sklurk
2026-10-23 02:32:22
(5 days ago)
Web App Attack
Web App Attack
πΊπΈ
ι¬Όε½±233
2026-09-23 12:10:34
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
πΊπΈ
kosada.com
2026-08-08 02:13:41
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
π©πͺ
EGP Abuse Dept
2026-07-22 03:01:04
(3 months ago)
Scraping webshop URLs (www.qusedpallets.com), likely botnet drone
Bad Web Bot
Exploited Host
πΊπΈ
kosada.com
2026-06-29 09:44:01
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
π«π·
Sklurk
2026-04-18 00:10:57
(6 months ago)
Web App Attack
Web App Attack
π¦πΊ
MAGIC
2026-03-27 03:34:36
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
π¨π
backslash
2026-03-18 14:03:07
(7 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
πΊπΈ
SiliSoftware
2026-01-30 14:27:13
(8 months ago)
/phpBB3/viewtopic.php?f=15&t=1426
Web App Attack
2025-12-13 17:01:54
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-24 23:43:07
(11 months ago)
scanning http requests from known botnet
Web App Attack
