🇩🇪
LRob
2026-11-11 03:17:21
UTC ·
(10 hours ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/8d0ee48fe27343c25ca64ba86eba094796c2beb4/internal/reporting/reporting_test.go | src_port: 55740 | ua: Mozilla/5.0 ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/8d0ee48fe27343c25ca64ba86eba094796c2beb4/internal/reporting/reporting_test.go | src_port: 55740 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 09:45:06
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 22:05:52
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
Anonymous
2026-09-24 16:15:20
UTC ·
(1 month ago)
Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /brands/hp/shopby/manufacturer-aastra-hp-infocus-powercom.html | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-16 07:18:48
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 37.77.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:18:40.755083 2026] [security2:error] [pid 27065:tid 27065] [client 37.77.53.199:58322] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 37.77.53.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:18:40.755083 2026] [security2:error] [pid 27065:tid 27065] [client 37.77.53.199:58322] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||meganmurph.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "meganmurph.com"] [uri "/"] [unique_id "aqpC0DQKy8sBKr6MrNsd8wAAAAo"], referer: https://warrenmurphy.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-10 18:48:04
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-08-29 15:05:11
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
kosada.com
2026-08-26 19:05:19
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-08-25 14:41:14
UTC ·
(2 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇵🇱
bmino.pl
2026-08-09 16:48:01
UTC ·
(3 months ago)
Autoban IP(2): 37.77.53.199 - Hostname: Al-Jazeera Al-Arabiya Company for Communication and Internet LTD - City: Baghdad - Region: Baghdad - Country: Iraq - Location: 33.3364,44.4004 - Organization: Al-Jazeera Al-Arabiya Company Communication and Int ...
show more
Autoban IP(2): 37.77.53.199 - Hostname: Al-Jazeera Al-Arabiya Company for Communication and Internet LTD - City: Baghdad - Region: Baghdad - Country: Iraq - Location: 33.3364,44.4004 - Organization: Al-Jazeera Al-Arabiya Company Communication and Internet LTD - failed attempts.
show less
Web App Attack
🇩🇪
Vegascosmetics
2026-08-07 18:03:10
UTC ·
(3 months ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected
Hacking
Exploited Host
Web App Attack
🇩🇪
pltcldvlpr
2026-06-23 23:06:42
UTC ·
(4 months ago)
Bogus Useragent: 37.77.53.199 - - [24/Jun/2026:01:06:42 +0200] "GET /protocol?id=bb_5_79&offset=400&seq=602 HTTP/1.1" 444 0 "-" "Opera/8.64.(Windows NT 5.01; mn-MN) Presto/2.9.174 Version/10.00" asn=51020 org="Al-Jazeera Al-Arabiya Company for Commun ...
show more
Bogus Useragent: 37.77.53.199 - - [24/Jun/2026:01:06:42 +0200] "GET /protocol?id=bb_5_79&offset=400&seq=602 HTTP/1.1" 444 0 "-" "Opera/8.64.(Windows NT 5.01; mn-MN) Presto/2.9.174 Version/10.00" asn=51020 org="Al-Jazeera Al-Arabiya Company for Communication and Internet LTD" country=IQ
...
show less
Bad Web Bot
Anonymous
2026-05-06 20:04:07
UTC ·
(6 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
🇫🇷
Sklurk
2026-02-09 01:18:55
UTC ·
(9 months ago)
Web App Attack
Web App Attack