๐บ๐ธ
TPI-Abuse
2026-10-26 00:14:20
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digi ...
show more
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:14:13.026958 2026] [security2:error] [pid 2935:tid 2935] [client 173.225.243.166:57836] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "at6bVSsLT4qHJAXgwSn3JwAAABk"], referer: https://cbcfargo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 00:08:51
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digi ...
show more
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:08:46.624965 2026] [security2:error] [pid 12962:tid 12962] [client 173.225.243.166:7610] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "atqljtvwWWnBSpt6bLhw5QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-11 04:40:03
(2 weeks ago)
Port Scan Attack proto:TCP src:3567 dst:23
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-03 03:02:10
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digi ...
show more
(mod_security) mod_security (id:210350) triggered by 173.225.243.166 (digijmres-166-243-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 23:02:05.300736 2026] [security2:error] [pid 9491:tid 9491] [client 173.225.243.166:40704] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeanboomergrenier.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeanboomergrenier.com"] [uri "/"] [unique_id "asBwLRN5mm_IvUpZMyJH6gAAABA"], referer: https://backlinkmaker.website/dir/professional-seo-links-105730
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-28 12:57:03
(4 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-11 05:38:31
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-08-30 19:11:27
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-08-26 02:39:37
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Bad Web Bot
2026-08-25 22:00:08
(2 months ago)
Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ...
show more
Large-scale coordinated botnet (2M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]); Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]) employed by Angara Technologies Group | Attack Signature Blocked: /catalog/product_compare/add/product/9414/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvY2F0YWxvZ3NlYXJjaC9yZXN1bHQvP2NhdD02OTMmYW1wO3E9ZXgrOTAmYW1wO3JhdGluZz02JmFtcDtzdG9jaz0x/form_key/o7zEDnWSRyFXkBfV/ | UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.01; Trident/4.0) | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-08-02 08:06:03
(2 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
2026-06-30 22:59:56
(3 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
๐ฉ๐ช
Inamin
2026-06-15 02:19:20
(4 months ago)
173.225.243.166 - - [15/Jun/2026:10:12:36 +0800] "GET /index.php?days=30&from=&limit=100&target=%E6% ...
show more
173.225.243.166 - - [15/Jun/2026:10:12:36 +0800] "GET /index.php?days=30&from=&limit=100&target=%E6%A1%9C%E5%86%85%E6%A2%A8%E5%AD%90%2F%E3%81%84%E3%81%A4%E3%82%82%E6%83%B3%E3%81%A3%E3%81%A6%E3%81%84%E3%82%8B%E3%81%93%E3%81%A8&title=%E7%89%B9%E6%AE%8A%3A%E5%B7%B2%E9%80%A3%E7%B5%90%E7%9A%84%E6%9C%80%E8%BF%91%E8%AE%8A%E6%9B%B4 HTTP/2.0" 502 559 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows 98; Win 9x 4.90; Trident/3.1)"
173.225.243.166 - - [15/Jun/2026:10:19:20 +0800] "GET /index.php?returnto=%E4%B8%AD%E9%A0%88%E3%81%8B%E3%81%99%E3%81%BF%2F%E6%80%9D%E3%81%84%E5%87%BA%E3%81%AE%E5%86%99%E7%9C%9F&returntoquery=oldid%3D5213%25EF%25BC%2588%25E6%2596%25BC&title=%E7%89%B9%E6%AE%8A%3A%E4%BD%BF%E7%94%A8%E8%80%85%E7%99%BB%E5%85%A5 HTTP/2.0" 504 167 "-" "Opera/8.60.(Windows NT 10.0; my-MM) Presto/2.9.169 Version/12.00"
...
show less
Brute-Force
๐ซ๐ท
vtchost.com
2026-03-02 18:31:50
(7 months ago)
hit a honeypot - ignored robots.txt - possible botnet
...
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-02-09 10:47:33
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 173.225.243.166 (digijmres-166-243-225-173.digi ...
show more
(mod_security) mod_security (id:210730) triggered by 173.225.243.166 (digijmres-166-243-225-173.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 05:47:28.014442 2026] [security2:error] [pid 407802:tid 407802] [client 173.225.243.166:54028] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Kendall 4733/Thumbs.db"] [unique_id "aYm7QF2urSsRVbVI0q7dcQAAABY"], referer: https://vitalitywebb.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2025-12-17 15:16:57
(10 months ago)
๐ฅถ Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack