🇺🇸
TPI-Abuse
2026-11-13 02:48:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 177.53.212.83 (177-53-212-83.fibramax.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:48:26.258910 2026] [security2:error] [pid 4566:tid 4566] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 177.53.212.83 (177-53-212-83.fibramax.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:48:26.258910 2026] [security2:error] [pid 4566:tid 4566] [client 177.53.212.83:56846] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thevenicecafe.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thevenicecafe.com"] [uri "/"] [unique_id "avZ6er32SYTW4Pti5jSPLAAAAAs"], referer: https://mmomeetups.com/venue/venice-caf-saint-louis
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-11-09 14:50:03
UTC ·
(6 days ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
justbible
2026-11-08 07:37:34
UTC ·
(1 week ago)
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 28 requests from 2026-11-08T07:37:34+00:00 to 2026-11-11T12:18:11+00:00, e.g. 'GET /en/original,bbe/preferences?from=%2Fen%2Foriginal%2Cbbe%2Fmatt%2F23 HTTP/2.0' with User-Ag ...
show more
HTTPS (TCP 443) scraping bot, part of a distributed and coordinated scrape: 28 requests from 2026-11-08T07:37:34+00:00 to 2026-11-11T12:18:11+00:00, e.g. 'GET /en/original,bbe/preferences?from=%2Fen%2Foriginal%2Cbbe%2Fmatt%2F23 HTTP/2.0' with User-Agent 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36'. Forged browser headers; spoofed user agent (did not identify itself as a bot); robots.txt ignored (a disallowed URL requested).
show less
Bad Web Bot
🇩🇪
SMARTNET
2025-11-26 07:00:13
UTC ·
(11 months ago)
Aisuru(Mirai variant) DDoS
DDoS Attack
2025-11-25 10:49:24
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇫🇷
Sklurk
2025-11-22 17:45:07
UTC ·
(11 months ago)
Web App Attack
Web App Attack
2025-11-19 19:22:15
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇫🇷
Sklurk
2025-11-14 11:40:49
UTC ·
(1 year ago)
Web App Attack
Web App Attack
🇮🇩
hermawan
2025-11-01 15:54:18
UTC ·
(1 year ago)
[Sat Nov 01 17:10:29.520190 2025] [security2:error] [pid 879001:tid 140344003905216] [client 177.53.212.83:45815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreru ...
show more
[Sat Nov 01 17:10:29.520190 2025] [security2:error] [pid 879001:tid 140344003905216] [client 177.53.212.83:45815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "227"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 ADG/11.0.2566 AOLBUILD/11.0.2566 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/4117-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2022/555559805-prakiraan-bulanan..."] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/4117-praki
...
show less
Hacking
Web App Attack
🇳🇱
exxos
2025-08-29 09:03:02
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking
2025-07-21 02:24:07
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-02-02 03:24:31
UTC ·
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2025-01-29 02:06:52
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
