🇺🇸
TPI-Abuse
2026-11-06 19:56:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:56:37.323784 2026] [security2:error] [pid 23611:tid 23611] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:56:37.323784 2026] [security2:error] [pid 23611:tid 23611] [client 190.196.248.150:36652] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ea2cdy.es|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ea2cdy.es"] [uri "/omnirig.html"] [unique_id "au4w9bVJUhijGqHKnukR4QAAAB4"], referer: https://ea2cdy.es/iaru-region-2.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-11-04 05:03:32
UTC ·
(1 week ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
2026-11-03 16:15:04
UTC ·
(1 week ago)
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (8M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Excessive Shopby Manufacturers Blocked: /communications/shopby/manufacturer-cisco-grandstream-snom-netgear-crestron-bosch-beyerdynamic-rcf-sony-avaya-ruckus-xclaim-spectralink.html | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-06 00:38:10
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:38:04.870557 2026] [security2:error] [pid 21517:tid 21517] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:38:04.870557 2026] [security2:error] [pid 21517:tid 21517] [client 190.196.248.150:38330] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lenorasflowers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lenorasflowers.com"] [uri "/"] [unique_id "asRC7NHMyEctdtMBMaj0ygAAAAc"], referer: https://backlinkgenerationtool.online/dir/trusted-seo-backlinks-120604
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:15:47
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:15:39.590232 2026] [security2:error] [pid 21456:tid 21456] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:15:39.590232 2026] [security2:error] [pid 21456:tid 21456] [client 190.196.248.150:55640] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kcmastercleaners.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kcmastercleaners.com"] [uri "/"] [unique_id "ar9MCzljPHjoAdUee7vZ0AAAABo"], referer: https://bestbacklinkbuilding.store/dir/high-quality-backlinks-112202
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-01 18:01:16
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 17:12:45
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:12:39.635273 2026] [security2:error] [pid 8502:tid 8502] [cli ...
show more
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:12:39.635273 2026] [security2:error] [pid 8502:tid 8502] [client 190.196.248.150:37714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||colbygrenier.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "colbygrenier.com"] [uri "/"] [unique_id "ar6UhygyWL6yKtQfkugTYwAAAAA"], referer: https://createbacklinksonline.space/dir/strong-domain-backlinks-42870
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 12:35:26
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:35:19.004798 2026] [security2:error] [pid 19058:tid 19058] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 190.196.248.150 (150-nred248.megalink.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 08:35:19.004798 2026] [security2:error] [pid 19058:tid 19058] [client 190.196.248.150:43714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.arsenaultartistmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.arsenaultartistmanagement.com"] [uri "/"] [unique_id "are8Bogwx7xGOOXccq3pbwAAAAc"], referer: https://bestseochecker.online/dir/natural-seo-backlinks-334
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-24 20:58:40
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
2026-09-19 23:37:14
UTC ·
(1 month ago)
Image scraping bot bypassing firewall/robots.txt restrictions in getImage.asp
Bad Web Bot
🇫🇷
Sklurk
2026-09-12 05:32:30
UTC ·
(2 months ago)
Web App Attack
Web App Attack
2026-08-25 13:24:32
UTC ·
(2 months ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 266702)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇩🇪
pltcldvlpr
2026-08-21 03:18:48
UTC ·
(2 months ago)
Bogus Useragent: 190.196.248.150 - - [21/Aug/2026:05:18:47 +0200] "GET /protocol?id=st_8_85¶graph=15132652&seq=252 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0; Trident/3.0)" asn=266702 org="MEGALINK S.R.L." country=AR
. ...
show more
Bogus Useragent: 190.196.248.150 - - [21/Aug/2026:05:18:47 +0200] "GET /protocol?id=st_8_85¶graph=15132652&seq=252 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0; Trident/3.0)" asn=266702 org="MEGALINK S.R.L." country=AR
...
show less
Bad Web Bot
🇺🇸
kosada.com
2026-08-20 18:03:53
UTC ·
(2 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇻🇳
trung.fun
2026-08-16 15:07:05
UTC ·
(2 months ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
