🇺🇸
TPI-Abuse
2026-10-03 01:47:53
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (177.73.100.27.telecomfoz.com.br) ...
show more
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (177.73.100.27.telecomfoz.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 21:47:48.380585 2026] [security2:error] [pid 20760:tid 20760] [client 177.73.100.27:13470] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||anniversaryweddingfavors.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "anniversaryweddingfavors.com"] [uri "/"] [unique_id "asBexGozR2tWZEX4-nbj3gAAAAQ"], referer: https://bulklinkbuilding.site/dir/powerful-seo-backlinks-10403
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 00:50:20
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (177.73.100.27.telecomfoz.com.br) ...
show more
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (177.73.100.27.telecomfoz.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:50:14.058409 2026] [security2:error] [pid 5542:tid 5542] [client 177.73.100.27:12006] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||myrtlebeachpartybuses.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "myrtlebeachpartybuses.com"] [uri "/"] [unique_id "arxcxqOxDRd_Au0b76N3GQAAAAQ"], referer: https://onlinebacklinkgenerator.shop/dir/quality-backlink-services-143966
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 00:18:20
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 177.73.100.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 20:18:04.443008 2026] [security2:error] [pid 7061:tid 7061] [client 177.73.100.27:13120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rocketfuelpartners.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rocketfuelpartners.com"] [uri "/"] [unique_id "arhgvNf-1syJhIVMyujqxAAAAAk"], referer: https://bestdapachecker.space/dir/professional-seo-backlinks-177994
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-20 18:30:19
(2 months ago)
Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index/add/product/4457/form_key/8r3ZScZmA8uhR6R2/ | UA: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/5679-04-20 11:33:06.311523 Firefox/3.8 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-29 12:20:52
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
FeG Deutschland
2026-03-23 01:38:09
(6 months ago)
Mail: - login with unknown user - bruteforce
Brute-Force
2026-01-26 17:29:49
(8 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Bad Web Bot
Exploited Host
2025-11-18 00:11:35
(10 months ago)
scanning http requests from known botnet
Web App Attack
🇪🇸
Global Cyber Police
2025-07-28 09:25:03
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
2025-07-13 22:01:34
(1 year ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH