🇺🇸
Zandro
2026-11-12 12:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 20:14:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:14:32.084383 2026] [security2:error] [pid 10194:tid 10194] [client 93.177.118.246:42081] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:14:32.084383 2026] [security2:error] [pid 10194:tid 10194] [client 93.177.118.246:42081] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.revelatorium.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.revelatorium.com"] [uri "/Starrgram06.htm"] [unique_id "avTMqKd4LFcQV0q7rnZ50QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:00:17
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:00:11.792284 2026] [security2:error] [pid 11038:tid 11038] [client 93.177.118.246:20595] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:00:11.792284 2026] [security2:error] [pid 11038:tid 11038] [client 93.177.118.246:20595] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.goodacoustic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.goodacoustic.com"] [uri "/wordpress/the-levins-selected-for-a-formal-showcase-at-serfa/"] [unique_id "avKy6w_RpC-Hjve41ASTYQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:06:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:06:39.072685 2026] [security2:error] [pid 11056:tid 11083] [client 93.177.118.246:60297] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:06:39.072685 2026] [security2:error] [pid 11056:tid 11083] [client 93.177.118.246:60297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.markhoran.pictures|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.markhoran.pictures"] [uri "/"] [unique_id "avGpP8ufRWawCoC3uJVatQAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-09-26 19:59:09
UTC ·
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
conrad10781
2026-04-11 13:47:48
UTC ·
(7 months ago)
nginx-wordpress
Web App Attack
2026-04-11 12:26:39
UTC ·
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇦
URAN Publishing Service
2026-03-31 09:55:16
UTC ·
(7 months ago)
93.177.118.246 - - [31/Mar/2026:12:55:15 +0300] "GET /wp-login.php HTTP/1.1" 404 209 "-" "curl/7.88.1"
93.177.118.246 - - [31/Mar/2026:12:55:15 +0300] "GET /wp-admin/ HTTP/1.1" 404 503 "-" "curl/7.88.1"
...
Web App Attack
🇺🇸
S.O.B.A. Dev.
2025-03-22 18:05:19
UTC ·
(1 year ago)
Threat Blocked by BeeHive from (ASN:26548) (Network:PUREVOLTAGE-INC) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-03-22T18:05:19Z)
Web Spam
Brute-Force
Web App Attack
🇨🇭
backslash
2025-03-21 22:40:10
UTC ·
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2024-10-11 08:19:28
UTC ·
(2 years ago)
(mod_security) mod_security (id:210740) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 11 04:19:22.938632 2024] [security2:error] [pid 15156:tid 15156] [client 93.177.118.246:9635] ...
show more
(mod_security) mod_security (id:210740) triggered by 93.177.118.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 11 04:19:22.938632 2024] [security2:error] [pid 15156:tid 15156] [client 93.177.118.246:9635] [client 93.177.118.246] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||chriscollinsplumbing.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "chriscollinsplumbing.com"] [uri "/"] [unique_id "ZwjfimwphpBLO8-vW-Vf-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
TI
2023-11-03 06:56:10
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
🇯🇵
Nanoniele
2021-07-09 21:09:13
UTC ·
(5 years ago)
2021/07/09 22:45:19; SQL injection; GENERATE_; Rz1SERIES8113 3740 uDMb; Firefox/12.0
SQL Injection
