🇳🇱
DrLex0
2026-11-10 11:28:13
UTC ·
(2 hours ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
45.165.247.72 443 - [10/Nov/2026:11:28:13 +0000] "GET [redacted] HTTP/1.1" 410 5245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
45.165.247.72 443 - [10/Nov/2026:11:28:13 +0000] "GET [redacted] HTTP/1.1" 410 5245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47"
show less
Bad Web Bot
Exploited Host
🇩🇪
LRob
2026-10-12 02:32:09
UTC ·
(4 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: http://www.leguideweb.info/uploads/images_thumbs/4335.jpg | ua: Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/52.0.2871.6 ...
show more
Not following 301 redirects — wasted requests | method: GET | path: http://www.leguideweb.info/uploads/images_thumbs/4335.jpg | ua: Mozilla/5.0 (Windows NT 6.3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36 OPR/52.0.2871.64
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-03 12:23:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 45.165.247.72 (45-165-247-72.tuddointernet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:23:50.211139 2026] [security2:error] [pid 27494:tid 2749 ...
show more
(mod_security) mod_security (id:210350) triggered by 45.165.247.72 (45-165-247-72.tuddointernet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:23:50.211139 2026] [security2:error] [pid 27494:tid 27494] [client 45.165.247.72:37186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||skyesongtollers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "skyesongtollers.com"] [uri "/"] [unique_id "asDz1im-Il0xrL4PJLJsrgAAAAY"], referer: https://dofollowlink.online/dir/trusted-link-building-191719
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-11 06:03:33
UTC ·
(1 month ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
kosada.com
2026-08-26 11:57:21
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-08-24 14:12:52
UTC ·
(2 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host
Bad Web Bot
🇺🇸
kosada.com
2026-08-17 02:40:42
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-28 00:09:57
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-16 03:56:37
UTC ·
(4 months ago)
[Tue Jun 16 10:56:33.209653 2026] [security2:error] [pid 509878:tid 139892995647168] [client 45.165.247.72:43024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity ...
show more
[Tue Jun 16 10:56:33.209653 2026] [security2:error] [pid 509878:tid 139892995647168] [client 45.165.247.72:43024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yahoo.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yahoo.go.id found within REQUEST_HEADERS:Referer: https://www.yahoo.go.id/ request_line = GET /index.php/profil/meteorologi/list-all-categories HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories"] [unique_id "ajDJcVK1CrRCZNXpI3OKzgAARwA"], referer https://www.yahoo.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[509879] [r3q07RaR/YM] [ajDJcVK1CrRCZNXpI3OKzgAARwA] keep_alive=[1] [2026-06-16 10:56:33.209659] [R:ajDJcVK1CrRCZNXpI3OKzgAARwA] UA:'Mozilla/5.0 (iPhone; CPU iPhone OS 16_3 like Mac OS X) AppleWebKit/605.1.1
...
show less
Email Spam
Hacking
🇨🇭
backslash
2025-10-07 19:05:29
UTC ·
(1 year ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
🇧🇷
OuverneY
2025-03-21 00:07:59
UTC ·
(1 year ago)
FW-PortScan: Traffic Blocked (Port=443 <- 22 attempts), Total connections: 44, Total destination IPs: 21
Port Scan
🇺🇸
Custard
2022-06-18 20:26:51
UTC ·
(4 years ago)
Jun 18 19:19:04 dnsmasq[2291768]: query[ANY] peacecorps.gov from 45.165.247.72
Port Scan
