🇫🇷
Tilellit.PRO
2026-11-10 03:13:58
UTC ·
(1 hour ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
2026-11-08 07:15:05
UTC ·
(1 day ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Blocked by User-Agent Filter (Bad Bot Pattern: Windows NT 5.0): Opera/9.72.(Windows NT 5.01; szl-PL) Presto/2.9.186 Version/12.00 | UA: Opera/9.72.(Windows NT 5.01; szl-PL) Presto/2.9.186 Version/12.00 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-28 06:15:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 02:15:28.821109 2026] [security2:error] [pid 3060 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 02:15:28.821109 2026] [security2:error] [pid 30609:tid 30609] [client 206.62.142.79:34738] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||adn-media.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "adn-media.net"] [uri "/"] [unique_id "auGTABYqBVDZfA-N3CninQAAAAE"], referer: https://acquire.co.in/redirect.php?ref_host=ex-lax.com.pk
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 02:00:13
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 22:00:05.538748 2026] [security2:error] [pid 1518 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 22:00:05.538748 2026] [security2:error] [pid 15188:tid 15188] [client 206.62.142.79:43642] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mkdesignndetailing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mkdesignndetailing.com"] [uri "/"] [unique_id "ar8QJXBsqla9UlimS4WzLgAAAAg"], referer: https://seobacklinks.shop/dir/professional-seo-links-138130
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-01 18:33:19
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 15:53:48
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 01:35:56
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:35:49.425894 2026] [security2:error] [pid 9866 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 21:35:49.425894 2026] [security2:error] [pid 9866:tid 9866] [client 206.62.142.79:50472] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rebelhollowfarm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rebelhollowfarm.com"] [uri "/"] [unique_id "ar249Uu5zV7KwjYByJCUNQAAABU"], referer: https://bestbacklinkwebsites.website/dir/ethical-link-building-services-173392
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-29 05:00:50
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
LRob
2026-09-28 00:10:47
UTC ·
(1 month ago)
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: q=Famille-Ransom-XRM/Marque-Scott | src_port: 43494 | 2026-09-28 00:10 UTC
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 07:00:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 03:00:35.103281 2026] [security2:error] [pid 1945 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 03:00:35.103281 2026] [security2:error] [pid 19454:tid 19454] [client 206.62.142.79:47712] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fwa51.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fwa51.com"] [uri "/"] [unique_id "ari_ExU0ZEkcXWJGw4ZXjgAAAAg"], referer: https://webbacklinkchecker.site/dir/expert-link-building-services-78053
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-24 06:16:53
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
LRob
2026-09-24 01:46:50
UTC ·
(1 month ago)
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /raid-jeunes-familles | 2026-09-24 01:46 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-19 05:54:43
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 01:54:38.012486 2026] [security2:error] [pid 1315 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.79 (Dinamic-Somos-206-62-142-79.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 01:54:38.012486 2026] [security2:error] [pid 13151:tid 13151] [client 206.62.142.79:57186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tmcenvironment.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tmcenvironment.com"] [uri "/"] [unique_id "aq4jnmgxkSDjNhJT9FXJiAAAABM"], referer: https://linkcheckertools.store/dir/professional-seo-links-214430
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
stechusa
2026-07-12 22:07:20
UTC ·
(3 months ago)
ELEVATED_THREAT | 581 IPs targeting /brand.html | URL template shared by 225 IPs: /brand.html?bulb_shape_type=*&bulb_shape=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.98, unique_ips=778)
Bad Web Bot
DDoS Attack
🇩🇪
Packets-Decreaser.NET
2025-10-31 01:28:29
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
