2026-11-09 08:58:00
UTC ·
(9 hours ago)
Apache vulnerability scan
Brute-Force
Web App Attack
2026-11-05 02:15:04
UTC ·
(4 days ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Excessive Shopby Manufacturers Blocked: /communications/shopby/manufacturer-cisco-lifesize-aastra-grandstream-audiocodes-crestron-bosch-sony-ruckus-fortinet-huawei-spectralink-unify.html | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
鬼影233
2026-09-26 17:52:58
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
2026-09-25 01:34:10
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 12482.
Port Scan
Hacking
🇺🇸
鬼影233
2026-09-22 03:34:04
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-14 19:59:25
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.169.47.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 15:58:39.905856 2026] [security2:error] [pid 19515:tid 19544] [client 45.169.47.13:36514] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.169.47.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 15:58:39.905856 2026] [security2:error] [pid 19515:tid 19544] [client 45.169.47.13:36514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apada.appraisalteam.net"] [uri "/app/config/parameters.yml.swp"] [unique_id "aqhR7yKgl7sr7VLErEUXywAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-25 18:41:38
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2026-08-19 04:24:18
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-08-15 17:17:01
UTC ·
(2 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-07-17 02:03:23
UTC ·
(3 months ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 11:55:22
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
hermawan
2026-06-26 05:34:38
UTC ·
(4 months ago)
[Fri Jun 26 12:34:30.757947 2026] [security2:error] [pid 1024633:tid 140397819594432] [client 45.169.47.13:49364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/ ...
show more
[Fri Jun 26 12:34:30.757947 2026] [security2:error] [pid 1024633:tid 140397819594432] [client 45.169.47.13:49364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "aj4PZg235UCX73xjs1UcgwADCAI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1024636] [pGZyduHLLhA] [aj4PZg235UCX73xjs1UcgwADCAI] keep_alive=[1] [2026-06-26 12:34:30.757951] [R:aj4PZg235UCX73xjs1UcgwADCAI] UA:'Mozilla/5.0 (iPhone; CPU iPho
...
show less
Email Spam
Hacking
🇨🇦
polycoda
2026-05-03 11:07:45
UTC ·
(6 months ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇳🇱
melroy89
2026-04-02 00:50:36
UTC ·
(7 months ago)
45.169.47.13 - - [02/Apr/2026:02:26:23 +0200] "GET /m/random/p/66306/paiwan-zupabauba-fan-kunanau-she-no-zhu-jiato-gu-cang-House-and-granary-of-Pabauba-savages-National-Taiwan-University/votes?type=up HTTP/1.1" 302 282 "-" "Mozilla/5.0 (Windows NT 1 ...
show more
45.169.47.13 - - [02/Apr/2026:02:26:23 +0200] "GET /m/random/p/66306/paiwan-zupabauba-fan-kunanau-she-no-zhu-jiato-gu-cang-House-and-granary-of-Pabauba-savages-National-Taiwan-University/votes?type=up HTTP/1.1" 302 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "kbin.melroy.org" 0.019
...
show less
DDoS Attack
🇺🇸
quilla
2026-03-28 23:35:00
UTC ·
(7 months ago)
Botnet infected device observed in honeypot (Vector: TCP HANDSHAKE ATTACK)
DDoS Attack
