2026-11-06 11:08:02
UTC ·
(10 hours ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-01 20:40:09
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 181.91.87.23 (181.91.87.23.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:40:00.167657 2026] [security2:error] [pid 15398:tid 15445] ...
show more
(mod_security) mod_security (id:210350) triggered by 181.91.87.23 (181.91.87.23.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:40:00.167657 2026] [security2:error] [pid 15398:tid 15445] [client 181.91.87.23:64493] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||managementconsultant.us|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "managementconsultant.us"] [uri "/"] [unique_id "auejoO7R_AgEwI1t1XmvSAAAABg"], referer: https://agqo.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-30 23:55:24
UTC ·
(6 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-30T23:53:37.000Z.
Web App Attack
🇩🇪
rh24
2026-10-29 03:37:19
UTC ·
(1 week ago)
181.91.87.23 (PY/Paraguay/181.91.87.23.ptr.personal.net.py), 25 distributed imapd attacks on account [redacted]
Brute-Force
🇺🇸
kosada.com
2026-10-06 07:15:45
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A388&f%5B3%5D=digest_key_terms%3A391&f%5B4%5D=digest_key_terms%3 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A388&f%5B3%5D=digest_key_terms%3A391&f%5B4%5D=digest_key_terms%3A392&f%5B5%5D=digest_key_terms%3A496&f%5B6%5D=digest_key_terms%3A514&f%5B7%5D=digest_key_terms%3A544&page=3 GET /[redacted]/search?f%5B0%5D=digest_key_terms%3A311&f%5B1%5D=digest_key_terms%3A317&f%5B2%5D=digest_key_terms%3A388&f%5B3%5D=digest_key_terms%3A391&f%5B4%5D=digest_key_terms%3A392&f%5B5%5D=digest_key_terms%3A496&f%5B6%5D=digest_key_terms%3A514&f%5B7%5D=digest_key_terms%3A544&page=3 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 16:48:22
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 10:09:07
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-26 11:19:29
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-21 05:57:22
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-18 20:25:51
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 181.91.87.23 (181.91.87.23.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:25:46.290649 2026] [security2:error] [pid 536:tid 544] [cli ...
show more
(mod_security) mod_security (id:210350) triggered by 181.91.87.23 (181.91.87.23.ptr.personal.net.py): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:25:46.290649 2026] [security2:error] [pid 536:tid 544] [client 181.91.87.23:21255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onenessrecords.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onenessrecords.com"] [uri "/"] [unique_id "aq2eSm-70Yp5E-sVE9Ou2wAAAQQ"], referer: https://domainrankchecker.online/dir/relevant-seo-backlinks-154035
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-22 13:27:13
UTC ·
(4 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
🇩🇪
HandyTreff.de
2026-05-29 21:22:01
UTC ·
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -73.659 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.
Web App Attack
Bad Web Bot
🇳🇱
maxxsense
2026-04-17 00:58:19
UTC ·
(6 months ago)
181.91.87.23 (PY/Paraguay/181.91.87.23.ptr.personal.net.py), 12 distributed imapd attacks on account [redacted]
Brute-Force
🇺🇸
ipblock.com
2026-01-28 08:23:00
UTC ·
(9 months ago)
IPBlock protected site ID [3192-af][s=02].
Exploit request, vulnerability probe.
Hacking
Bad Web Bot
Web App Attack
🇸🇬
Vano Ganzzz
2025-12-15 19:41:05
UTC ·
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from PY.
Action taken: BLOCK
ASN: 27895 (Nucleo S.A.)
Protocol: HTTP/2 (GET method)
Endpoint: /euhiokeqea
Timestamp: 2025-12-15T19:41:05Z
Ray ID: 9ae86a9b3a51f24e
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
Triggered Cloudflare WAF (firewallCustom) from PY.
Action taken: BLOCK
ASN: 27895 (Nucleo S.A.)
Protocol: HTTP/2 (GET method)
Endpoint: /euhiokeqea
Timestamp: 2025-12-15T19:41:05Z
Ray ID: 9ae86a9b3a51f24e
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5.1 Safari/605.1.15
show less
Bad Web Bot
