2026-11-14 15:36:38
UTC ·
(2 hours ago)
WEB attack
Brute-Force
🇩🇪
nyuuzyou
2026-11-06 10:34:09
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T10:34:09Z.
Bad Web Bot
2026-11-05 04:15:03
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Catalog Search Abuse Blocked: /catalogsearch/result/?cat=33+&projector_class=69%2C85%2C86&q=nec+np403 | UA: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/9567-10-14 22:31:57.404694 Firefox/3.6.15 | (Magento Site)
show less
Hacking
Bad Web Bot
🇫🇷
ingroscart.it
2026-10-12 05:31:55
UTC ·
(1 month ago)
(wordpress) Failed wordpress login from 206.84.80.100 (CO/Colombia/Antioquia/Medellín/Dinamic-Somos-206-84-80-100.somosinternet.co/[redacted])
Brute-Force
🇺🇸
TPI-Abuse
2026-10-04 11:12:52
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:12:46.494973 2026] [security2:error] [pid 3174 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:12:46.494973 2026] [security2:error] [pid 31746:tid 31770] [client 206.84.80.100:35214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "americanacademyofprojectmanagement.com"] [uri "/"] [unique_id "asI0rsJV0r0BHNvDUdTP-gAAAFU"], referer: https://buybacklinks.space/dir/backlinks-for-organic-growth-8545
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 04:15:12
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:15:04.229950 2026] [security2:error] [pid 1936 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 00:15:04.229950 2026] [security2:error] [pid 19361:tid 19361] [client 206.84.80.100:46276] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||markshvarts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "markshvarts.com"] [uri "/"] [unique_id "asHSyM--1-89eaYPSP-W0gAAAAg"], referer: https://backlinkseoservices.website/dir/results-driven-link-building-130881
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 07:00:59
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 03:00:52.784929 2026] [security2:error] [pid 2419 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 03:00:52.784929 2026] [security2:error] [pid 24195:tid 24195] [client 206.84.80.100:33362] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||title28.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "title28.com"] [uri "/"] [unique_id "asCoJATrcclL0P1ZQcjrlQAAAAw"], referer: https://localcitations.online/dir/ethical-seo-backlinks-214133
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 12:30:18
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 08:30:15.441360 2026] [security2:error] [pid 2141 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 08:30:15.441360 2026] [security2:error] [pid 21412:tid 21412] [client 206.84.80.100:35940] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||representacionesthompson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "representacionesthompson.com"] [uri "/"] [unique_id "ar-j1wEkTs4L7j7-Dy1PQQAAAAE"], referer: https://cheapbacklinkservice.store/dir/advanced-link-building-175232
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 09:20:20
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:20:13.722160 2026] [security2:error] [pid 2062 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:20:13.722160 2026] [security2:error] [pid 20626:tid 20626] [client 206.84.80.100:48498] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeromesupick.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeromesupick.com"] [uri "/"] [unique_id "ar93TWwHcmT7tR2iMPJGYgAAAAU"], referer: https://websitebacklinkgenerator.site/dir/premium-backlink-building-106167
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 08:27:50
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:27:45.818810 2026] [security2:error] [pid 401: ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:27:45.818810 2026] [security2:error] [pid 401:tid 401] [client 206.84.80.100:36290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||erikageyama.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "erikageyama.com"] [uri "/"] [unique_id "ar9rAb926kz8pMxUzSQ1HwAAAAI"], referer: https://professionallinkbuilding.space/dir/high-dr-backlinks-66369
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-30 12:24:36
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-28 21:18:43
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:18:36.774510 2026] [security2:error] [pid 2800 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:18:36.774510 2026] [security2:error] [pid 28008:tid 28008] [client 206.84.80.100:38872] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thereddoorlounge.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thereddoorlounge.com"] [uri "/"] [unique_id "arrZrL1y5OsSJh_WHs-0KAAAAAw"], referer: https://doglegpreacher.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 02:19:34
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:19:27.913117 2026] [security2:error] [pid 1200 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 22:19:27.913117 2026] [security2:error] [pid 12000:tid 12082] [client 206.84.80.100:59402] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||clinicadelparabrisas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clinicadelparabrisas.com"] [uri "/"] [unique_id "arcrr1tf_t4MwXuLyMX6iwAAANg"], referer: https://bulkpachecker.shop/dir/seo-growth-backlinks-41326
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 16:50:11
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 12:50:07.600731 2026] [security2:error] [pid 2268 ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.100 (Dinamic-Somos-206-84-80-100.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 12:50:07.600731 2026] [security2:error] [pid 22685:tid 22685] [client 206.84.80.100:39736] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garysgates.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garysgates.com"] [uri "/"] [unique_id "aramP6B41ccPgsMt9Y9khgAAABA"], referer: https://sitecheckerfree.online/dir/strong-seo-backlinks-79329
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-23 14:16:36
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
