🇺🇸
TPI-Abuse
2026-11-07 12:02:44
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:02:36.010261 2026] [security2:error] [pid 21313:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:02:36.010261 2026] [security2:error] [pid 21313:tid 21313] [client 202.47.164.174:54996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mikebenson.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mikebenson.com"] [uri "/"] [unique_id "au8TXIbIIHrsNGR0KuFKFgAAACs"], referer: https://aplicabbs.com/all/1917/11.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-11-05 12:23:49
UTC ·
(2 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T12:23:49Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-05 08:05:30
UTC ·
(2 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T08:05:30Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-04 07:20:14
UTC ·
(3 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T07:20:14Z.
Bad Web Bot
🇩🇪
LRob
2026-11-01 11:10:59
UTC ·
(6 days ago)
Proxynvader botnet: shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: order=product.reference.asc&productListView=list&q=Marque-Winora/Famille-Yucatan | src_port: 43282 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ...
show more
Proxynvader botnet: shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: order=product.reference.asc&productListView=list&q=Marque-Winora/Famille-Yucatan | src_port: 43282 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 12:45:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:45:48.599077 2026] [security2:error] [pid 6662:tid 66 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:45:48.599077 2026] [security2:error] [pid 6662:tid 6662] [client 202.47.164.174:32780] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mrpinman.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mrpinman.org"] [uri "/"] [unique_id "attW_LKCSQfMwz9b4NVRIAAAAAw"], referer: https://addurl.in/redirect.php?ref_host=evsx.xyz
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-19 23:11:08
UTC ·
(2 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=45&topics%5B4%5D=89&topics%5B5%5D=40&topics%5B6%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:144.0) Gecko ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B3%5D=45&topics%5B4%5D=89&topics%5B5%5D=40&topics%5B6%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:144.0) Gecko/20100101 Firefox/144.0")
show less
DDoS Attack
Bad Web Bot
🇷🇺
AbuseIPDB informer
2026-10-09 08:30:22
UTC ·
(4 weeks ago)
nfdump top talker: 202.47.164.174 | first seen 2026-10-09 11:30:22.720 | duration 00:00:00.092 | flows=3 | packets=71610 | bytes=53.7 M | pps=772 | bps=4.6 M | bpp=750 | proto=any
DDoS Attack
Port Scan
Exploited Host
🇺🇸
kosada.com
2026-10-09 00:45:06
UTC ·
(4 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=45&topics%5B5%5D=29&topics%5B6%5D=25&topics%5B7%5D=58 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=45&topics%5B5%5D=29&topics%5B6%5D=25&topics%5B7%5D=58 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 15:46:12
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 11:06:49
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 02:31:22
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:31:12.781860 2026] [security2:error] [pid 26395:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 22:31:12.781860 2026] [security2:error] [pid 26395:tid 26395] [client 202.47.164.174:42438] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rodandreelpiercam.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rodandreelpiercam.com"] [uri "/"] [unique_id "ar3F8Lb4vsHVeOVPD6mPFgAAAA0"], referer: https://dofollowlink.space/dir/backlinks-for-websites-178143
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-29 09:02:55
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-26 15:02:40
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-25 04:10:06
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:09:57.975377 2026] [security2:error] [pid 28031:tid 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.47.164.174 (202-47-164-174.blueberryonlinebd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:09:57.975377 2026] [security2:error] [pid 28031:tid 28031] [client 202.47.164.174:43708] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chicagosukkahcenter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chicagosukkahcenter.com"] [uri "/"] [unique_id "arX0FZ-bmWFLYZyaZkER8gAAAAk"], referer: https://tfchecker.online/dir/backlinks-for-search-ranking-38548
show less
Brute-Force
Bad Web Bot
Web App Attack
