2026-10-21 23:15:17
UTC ·
(3 weeks ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Offpeak: Sessionless Catalog Access Blocked: /catalog/product_compare/add/product/11022/uenc/aHR0cHM6Ly93d3cuZDJvZmZpY2UucnUvbXVsdGltZWRpYS9kaXNwbGF5L3ZpZGVvLXdhbGwvc2hvcGJ5L3NjcmVlbnNpemUtMzItNDAtNTAtNjAuaHRtbA,,/form_key/6eHVipF0DQVoccoQ/ | UA: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 4.0; Trident/3.0) | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-10-18 21:34:30
UTC ·
(3 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
🇫🇷
SpaceHost-Server
2026-10-17 22:24:48
UTC ·
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-17 20:32:58
UTC ·
(3 weeks ago)
2026/10/17 20:32:54 [error] 1186585#1186585: *9165066 access forbidden by rule, client: 41.56.128.73, server: binixo.com.br, request: "GET /wp-content/uploads/2-47.jpg HTTP/2.0", host: "binixo.com.br", referrer: "https://google.com"
2026/10/17 20:32: ...
show more
2026/10/17 20:32:54 [error] 1186585#1186585: *9165066 access forbidden by rule, client: 41.56.128.73, server: binixo.com.br, request: "GET /wp-content/uploads/2-47.jpg HTTP/2.0", host: "binixo.com.br", referrer: "https://google.com"
2026/10/17 20:32:55 [error] 1186585#1186585: *9165066 access forbidden by rule, client: 41.56.128.73, server: binixo.com.br, request: "GET /wp-content/uploads/2-47.jpg HTTP/2.0", host: "binixo.com.br", referrer: "https://binixo.com.br/emprestimo-pessoal-em-belo-horizonte/"
2026/10/17 20:32:57 [error] 1186585#1186585: *9165066 access forbidden by rule, client: 41.56.128.73, server: binixo.com.br, request: "GET /wp-content/uploads/2-47.jpg HTTP/2.0", host: "binixo.com.br", referrer: "https://google.com"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
UTC ·
(11 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
DDoS Attack
SQL Injection
Exploited Host
🇮🇩
hermawan
2025-11-22 10:44:19
UTC ·
(11 months ago)
[Sat Nov 22 17:42:35.360110 2025] [security2:error] [pid 904151:tid 140647629584064] [client 41.56.128.73:30032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerul ...
show more
[Sat Nov 22 17:42:35.360110 2025] [security2:error] [pid 904151:tid 140647629584064] [client 41.56.128.73:30032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "247"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/87.0.4280.88 Safari/537.36 request_line = GET /index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/623-analisis-kondisi-dinamika-atmosfer-laut-dasarian-tahun-2017/555556374-analisis-dinamika-atmosfer-laut-analisis-dan-prediksi-curah-hujan-update-pembaharuan-dasarian-ii-november-2018 HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/analisis-kondisi-dinamika-atmosfer-laut-dasarian/623-analisis-kondisi-dinamika-atmosfer-laut-dasari
...
show less
Hacking
Web App Attack
🇳🇱
exxos
2025-08-28 11:05:10
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking
🇳🇱
exxos
2025-08-28 10:03:01
UTC ·
(1 year ago)
http-no-verb
Hacking
