🇺🇸
kosada.com
2026-06-08 09:18:07
(2 days ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2026-06-07 04:35:41
(4 days ago)
Web App Attack
Web App Attack
🇮🇹
A000Z
2026-06-05 02:51:05
(6 days ago)
Fail2Ban: 47.79.11.62 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ...
show more
Fail2Ban: 47.79.11.62 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot
🇨🇿
vitex
2026-05-26 04:00:00
(2 weeks ago)
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ...
show more
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour.
show less
DDoS Attack
Bad Web Bot
🇮🇹
A000Z
2026-05-24 17:54:49
(2 weeks ago)
Fail2Ban: 47.79.11.62 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ...
show more
Fail2Ban: 47.79.11.62 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
show less
Bad Web Bot
🇦🇺
MAGIC
2026-05-23 00:35:40
(2 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-05-22 22:26:04
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-18 20:54:57
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 47.79.11.62 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 47.79.11.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 16:54:50.281986 2026] [security2:error] [pid 9268:tid 9268] [client 47.79.11.62:57694] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".risnia.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/www.risnia.com"] [unique_id "agt8mkKgekea8sbgoQHfdwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-05-03 16:03:25
(1 month ago)
Unidentified crawler ignoring robots.txt: 47.79.11.62 - - [03/May/2026:18:02:26 +0200] "GET /protoco ...
show more
Unidentified crawler ignoring robots.txt: 47.79.11.62 - - [03/May/2026:18:02:26 +0200] "GET /protocol?id=by_14_83&offset=300&seq=60 HTTP/2.0" 200 342101 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
47.79.11.62 - - [03/May/2026:18:03:24 +0200] "GET /protocol?id=sh_18_143&offset=450&seq=479 HTTP/2.0" 200 342348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
47.79.11.62 - - [03/May/2026:18:03:25 +0200] "GET /protocol?id=be_18_68&offset=200&seq=172 HTTP/2.0" 200 345301 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" asn=45102 org="Alibaba (US) Technology Co., Ltd."
...
show less
Bad Web Bot
2026-04-30 19:38:35
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
🇪🇸
el-brujo
2026-04-24 00:20:22
(1 month ago)
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=smartwtt.com Host: elhacker ...
show more
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=smartwtt.com Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Alibaba (US) Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-24T00:20:22Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-04-23 23:35:34
(1 month ago)
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=wunu.de Host: elhacker.net ...
show more
Cloudflare WAF: Request Path: /geolocalizacion.html Request Query: ?host=wunu.de Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Alibaba (US) Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-23T23:35:34Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
kosada.com
2026-04-21 05:30:17
(1 month ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇪🇸
el-brujo
2026-04-19 21:36:02
(1 month ago)
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=Social4Geek.com Host: elhac ...
show more
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=Social4Geek.com Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: ALIBABA-CN-NET Alibaba US Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-19T21:36:02Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇪🇸
el-brujo
2026-04-14 23:33:16
(1 month ago)
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=83934.pflege-schwalger.de H ...
show more
Cloudflare WAF: Request Path: /registros-dns.html Request Query: ?domain=83934.pflege-schwalger.de Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: ALIBABA-CN-NET Alibaba US Technology Co., Ltd. Country: SG Method: GET Timestamp: 2026-04-14T23:33:16Z ruleId: 3c55069d689d450eb591f3b84da7ce04. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack