🇩🇪
LRob
2026-11-10 10:27:29
UTC ·
(1 day ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/56892fbb2bd0a478a99f55e7a4da177cf8137fa8/shipped/parsers/http-backdoor-probe.yaml | src_port: 43694 | ua: Mozilla/ ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/56892fbb2bd0a478a99f55e7a4da177cf8137fa8/shipped/parsers/http-backdoor-probe.yaml | src_port: 43694 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
2026-11-06 02:15:04
UTC ·
(5 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Attack Signature Blocked: /wishlist/index/add/product/7447/form_key/igAqZVl3ig4H2IzH/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇰
powerhostingdk
2026-10-15 06:47:03
UTC ·
(3 weeks ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
🇬🇧
killian7603
2026-10-14 20:42:27
UTC ·
(3 weeks ago)
Logon Policy Violation
Email Spam
Spoofing
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 05:13:25
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:13:18.775908 2026] [security2:error] [pid 3067:tid 3086] [client 37.110.211.25:11641] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 01:13:18.775908 2026] [security2:error] [pid 3067:tid 3086] [client 37.110.211.25:11641] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wizart.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wizart.org"] [uri "/conversa"] [unique_id "as8PbgR9AHRdbflGhI_KaAAAAU4"], referer: https://artedigital-ula.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 13:18:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 09:18:00.830873 2026] [security2:error] [pid 28532:tid 28532] [client 37.110.211.25:22958] M ...
show more
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 09:18:00.830873 2026] [security2:error] [pid 28532:tid 28532] [client 37.110.211.25:22958] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.canebrakes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.canebrakes.com"] [uri "/"] [unique_id "ar-vCOcS93hseiCzO_Zv7QAAAAo"], referer: https://qualitylinkbuilding.website/dir/backlinks-for-search-ranking-33348
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-01 15:51:11
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
2026-09-29 12:25:18
UTC ·
(1 month ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇺🇸
MPL
2026-09-29 10:36:24
UTC ·
(1 month ago)
tcp/23 (2 or more attempts)
Port Scan
🇳🇱
soverin
2026-09-29 09:38:03
UTC ·
(1 month ago)
spam
Email Spam
🇺🇸
鬼影233
2026-09-26 20:02:52
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
2026-09-22 06:12:06
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇩🇰
powerhostingdk
2026-09-18 02:51:29
UTC ·
(1 month ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
🇺🇸
TPI-Abuse
2026-09-17 13:24:26
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:24:20.541550 2026] [security2:error] [pid 20791:tid 20791] [client 37.110.211.25:30184] M ...
show more
(mod_security) mod_security (id:210350) triggered by 37.110.211.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:24:20.541550 2026] [security2:error] [pid 20791:tid 20791] [client 37.110.211.25:30184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||starthreadingsalon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "starthreadingsalon.com"] [uri "/"] [unique_id "aqvqBPE14Nl9C09dJgoo1wAAAAw"], referer: https://dacheckerseo.space/dir/backlinks-for-seo-197542
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-05 05:13:29
UTC ·
(2 months ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
