🇩🇪
nyuuzyou
2026-11-05 12:22:14
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T12:22:14Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-01 22:26:03
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T22:26:03Z.
Bad Web Bot
🇩🇪
tsZero
2026-10-29 10:35:44
UTC ·
(2 weeks ago)
Scan example: path=/xmlrpc.php status=403
Hacking
🇺🇸
TPI-Abuse
2026-10-23 19:34:13
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.150.80.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:34:06.374280 2026] [security2:error] [pid 9858:tid 9858] [client 217.150.80.98:36826] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 217.150.80.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:34:06.374280 2026] [security2:error] [pid 9858:tid 9858] [client 217.150.80.98:36826] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/"] [unique_id "atu2rtvgJBWV2fc1Dtx_-gAAAA8"], referer: https://hallucidate.blogspot.com/2010/05/go-visit-museum.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-15 06:21:00
UTC ·
(4 weeks ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
鬼影233
2026-10-02 12:20:55
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 17:59:23
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-28 11:48:10
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-28 10:00:48
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 217.150.80.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:00:32.346542 2026] [security2:error] [pid 22774:tid 22859] [client 217.150.80.98:35962] M ...
show more
(mod_security) mod_security (id:210350) triggered by 217.150.80.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:00:32.346542 2026] [security2:error] [pid 22774:tid 22859] [client 217.150.80.98:35962] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||adprospb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "adprospb.com"] [uri "/"] [unique_id "aro6wHgsDmnn-mWIY-fVRQAAAFc"], referer: https://dacheckertoolfree.site/dir/website-ranking-links-2574
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-09-26 10:02:49
UTC ·
(1 month ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /blog/deflagration.cerebroside-Leptocardia/prenaval/distractingly/heliotype/shrewstruck-adoptively/. User-Agent: Mozilla/5.0 ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /blog/deflagration.cerebroside-Leptocardia/prenaval/distractingly/heliotype/shrewstruck-adoptively/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-09-26 00:36:47
UTC ·
(1 month ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2026-09-25 19:08:04
UTC ·
(1 month ago)
This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no b ...
show more
This address is taking part in a large-scale, distributed L7 DDoS against an online shop: automated requests to the shop's search, filter and sort pages — the most expensive pages to serve — sent with no referer and with no page asset loaded, so no browser is behind them. Each participating address sends only one or two such requests, but we count them by the million: a botnet, compromised devices, or abused proxies. The address is blocked. An investigation into what exactly sends these requests from your network (malware, an open proxy, a rented device) would help stop the attack at its source. | path: /41-meilleur-velo-electrique-entre-5000-et-10000-euros | query: q=Ann%C3%A9e-2026/Marque-Scott | 2026-09-25 19:08 UTC
show less
DDoS Attack
Web App Attack
🇺🇸
鬼影233
2026-09-24 21:26:16
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 11:36:45
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-21 06:12:23
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
