🇩🇪
LRob
2026-11-09 17:46:26
UTC ·
(2 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/d782f55608c725357111a18a9d4ddd4f70d88062/internal/reporting/reporting_test.go | src_port: 25109 | ua: Mozilla/5. ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/d782f55608c725357111a18a9d4ddd4f70d88062/internal/reporting/reporting_test.go | src_port: 25109 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇸🇬
mypatricks
2026-10-03 04:18:27
UTC ·
(1 month ago)
186.12.204.55 | Port: 9774 | DNS: host55.186-12-204.telmex.net.ar 2026-10-03T12:18:26+08:00 America/Argentina/Catamarca | HOST Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ...
show more
186.12.204.55 | Port: 9774 | DNS: host55.186-12-204.telmex.net.ar 2026-10-03T12:18:26+08:00 America/Argentina/Catamarca | HOST Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?ee9effdf2fa2e2daa | Ref: - | Country: AR/Argentina/−03:00 IP City: Catamarca Windows a449248709e61cd3-GRU/São Paulo, Brazil 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
鬼影233
2026-10-01 20:10:42
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 09:49:59
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 05:39:53
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-10 21:08:05
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇩🇪
pltcldvlpr
2026-06-17 01:37:09
UTC ·
(4 months ago)
Bogus Useragent: 186.12.204.55 - - [17/Jun/2026:03:37:09 +0200] "GET /protocol?id=by_17_50&offset=1050&seq=1076 HTTP/1.1" 403 5 "-" "Opera/9.12.(X11; Linux i686; se-NO) Presto/2.9.183 Version/11.00" asn=11664 org="Techtel LMDS Comunicaciones Interact ...
show more
Bogus Useragent: 186.12.204.55 - - [17/Jun/2026:03:37:09 +0200] "GET /protocol?id=by_17_50&offset=1050&seq=1076 HTTP/1.1" 403 5 "-" "Opera/9.12.(X11; Linux i686; se-NO) Presto/2.9.183 Version/11.00" asn=11664 org="Techtel LMDS Comunicaciones Interactivas S.A." country=AR
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-11 21:11:29
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 186.12.204.55 (host55.186-12-204.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 17:11:24.079924 2026] [security2:error] [pid 7634:tid 7634] [c ...
show more
(mod_security) mod_security (id:210730) triggered by 186.12.204.55 (host55.186-12-204.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 17:11:24.079924 2026] [security2:error] [pid 7634:tid 7634] [client 186.12.204.55:52206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dc406.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dc406.org"] [uri "/fallsgreatestcookies.com"] [unique_id "agJF_F7cR0PdTAUaojJZOwAAAAg"], referer: https://www.dc406.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-26 06:06:55
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
Anonymous
2025-10-24 20:10:58
UTC ·
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.24 is noted in report timestamp
Hacking
Brute-Force