🇫🇷
Sklurk
2026-06-07 05:17:44
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-06-07 04:11:00
(1 day ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
ersei.net
2026-06-01 19:15:10
(6 days ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇨🇿
vitex
2026-05-26 04:00:00
(1 week ago)
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ...
show more
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour.
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-23 19:17:58
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 47.79.10.10 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.10.10 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 15:17:53.137615 2026] [security2:error] [pid 18075:tid 18075] [client 47.79.10.10:49814] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.flavornet.org|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/80466-34-8.pdb"] [unique_id "ahH9YQeMi0xMl3RjZa9JZwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-23 06:17:04
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
pltcldvlpr
2026-05-03 20:49:27
(1 month ago)
Unidentified crawler ignoring robots.txt: 47.79.10.10 - - [03/May/2026:22:48:29 +0200] "GET /protoco ...
show more
Unidentified crawler ignoring robots.txt: 47.79.10.10 - - [03/May/2026:22:48:29 +0200] "GET /protocol?id=be_18_62&offset=1650&seq=1664 HTTP/2.0" 200 346572 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
47.79.10.10 - - [03/May/2026:22:49:26 +0200] "GET /protocol?id=sl_16_31&offset=750&seq=619 HTTP/2.0" 200 352933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
47.79.10.10 - - [03/May/2026:22:49:27 +0200] "GET /protocol?id=mv_4_78&offset=300&seq=288 HTTP/2.0" 200 339243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
...
show less
Bad Web Bot
🇺🇸
ersei.net
2026-05-03 12:14:32
(1 month ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇦🇺
MAGIC
2026-05-02 02:15:40
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-04-30 21:52:23
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
ersei.net
2026-04-29 11:27:06
(1 month ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇺🇸
ersei.net
2026-04-28 09:27:07
(1 month ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
🇪🇸
el-brujo
2026-04-28 02:48:33
(1 month ago)
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=179.60.96.48 Host: elhacker ...
show more
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=179.60.96.48 Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Alibaba (US) Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-28T02:48:33Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-04-28 02:36:09
(1 month ago)
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=191.126.0.183 Host: elhacke ...
show more
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=191.126.0.183 Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Alibaba (US) Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-28T02:36:09Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-04-24 00:23:28
(1 month ago)
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=186.79.250.180 Host: elhack ...
show more
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=186.79.250.180 Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Alibaba (US) Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-24T00:23:28Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack