🇺🇸
TPI-Abuse
2026-11-06 18:52:30
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:52:22.423498 2026] [security2:error] [pid 21853:tid 21853 ...
show more
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:52:22.423498 2026] [security2:error] [pid 21853:tid 21853] [client 181.85.209.33:27626] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ea2cdy.es|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ea2cdy.es"] [uri "/iaru-region-3.html"] [unique_id "au4h5mb5ad-i203cAQlCVQAAAAY"], referer: https://ea2cdy.es/dimension-4.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2026-11-06 09:30:53
UTC ·
(1 day ago)
Credential Stuffing
Brute-Force
2026-11-03 06:15:03
UTC ·
(4 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/shopby/manufacturer-optoma-infocus/projector_class-ul_trakorotkofokusnye/projector_lumen-2600-4000-3300-2300.html | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6778.204 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-28 23:11:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:11:39.820022 2026] [security2:error] [pid 3151:tid 3151] ...
show more
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:11:39.820022 2026] [security2:error] [pid 3151:tid 3151] [client 181.85.209.33:60808] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rodamundo.blog|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rodamundo.blog"] [uri "/"] [unique_id "auKBK1AkKDHxZ6aau6S4mAAAADE"], referer: https://each.co.in/redirect.php?ref_host=cachedentities.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:11:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:11:10.614280 2026] [security2:error] [pid 25848:tid 25848 ...
show more
(mod_security) mod_security (id:210350) triggered by 181.85.209.33 (181.85.209.33.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:11:10.614280 2026] [security2:error] [pid 25848:tid 25848] [client 181.85.209.33:31432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||recetabook.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "recetabook.com"] [uri "/"] [unique_id "auJIzjcqudzEr5mJ0CTJvQAAAAA"], referer: https://antojoentucocina.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-10-13 03:09:22
UTC ·
(3 weeks ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-10-06 00:24:20
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-21 20:19:52
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-08-31 01:04:34
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇩🇪
klaus_ph
2026-08-13 14:21:10
UTC ·
(2 months ago)
181.85.209.33 - - [13/Aug/2026:00:28:32 +0200] "GET /lka/Record/b0001115/Export?style=RDF HTTP/1.1" 500 24669 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/85.8.5 (KHTML, like Gecko) Safari/85.8.1"
...
Bad Web Bot
🇺🇸
kosada.com
2026-07-26 21:16:13
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-04-04 15:43:23
UTC ·
(7 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2026-04-02 23:40:52
UTC ·
(7 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇨🇭
backslash
2026-01-15 20:15:27
UTC ·
(9 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
