2026-10-26 02:07:06
(1 week ago)
Search protection: facets on category: 4 values in one group (limit 3), 3 groups (limit 2); noref on category: 3 filter groups with no referrer of the shop (counts from 2) / reCAPTCHA challenge timed out
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-22 20:59:28
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:59:21.542812 2026] [security2:error] [pid 21672:tid 21672] [client 37.61.77.89:26600] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:59:21.542812 2026] [security2:error] [pid 21672:tid 21672] [client 37.61.77.89:26600] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||n3fjp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "n3fjp.com"] [uri "/"] [unique_id "atp5KfNvoXJ6IYQCIhUrcAAAAAY"], referer: https://w2lj.blogspot.com/2010/07/more-bonding-time.html
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
ALPHANET
2026-10-17 07:27:04
(2 weeks ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
๐ท๐ธ
pavel Karpenko
2026-10-12 19:45:45
(2 weeks ago)
37.61.77.89 - - [12/Oct/2026:22:45:45 +0300] "GET /transfer/?company_country=GB&counterparty_country=TH&months=3&share=48d042c2f69d0dda&view=companies HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
37.61.77.89 - - [12/Oct/2026:22:45:45 +0300] "GET /transfer/?company_country=GB&counterparty_country=TH&months=3&share=48d042c2f69d0dda&view=companies HTTP/2.0" 302 0 "https://ultralir.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0" client_port=23137 server_port=443 rt=0.010 urt=0.010 transfer_entry=- server_addr=195.133.18.6 epoch=1791834345.227
show less
DDoS Attack
๐ฉ๐ช
Packets-Decreaser.NET
2026-10-11 01:19:23
(3 weeks ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2026-10-10 08:25:23
(3 weeks ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp
Exploited Host
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-29 13:26:41
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-29 11:51:08
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-28 08:05:37
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:05:33.465503 2026] [security2:error] [pid 11927:tid 11927] [client 37.61.77.89:35344] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:05:33.465503 2026] [security2:error] [pid 11927:tid 11927] [client 37.61.77.89:35344] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeffreysbaycabs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeffreysbaycabs.com"] [uri "/"] [unique_id "arofzZl7TQM0AR6UVsXG8AAAABk"], referer: https://bulkbacklinkchecker.site/dir/strong-domain-backlinks-105870
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 13:43:38
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 09:43:33.859744 2026] [security2:error] [pid 24395:tid 24395] [client 37.61.77.89:40180] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 37.61.77.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 09:43:33.859744 2026] [security2:error] [pid 24395:tid 24395] [client 37.61.77.89:40180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kildarafarms.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kildarafarms.com"] [uri "/"] [unique_id "arZ6hcchRFSRolea59wfPQAAAAI"], referer: https://backlinkscountchecker.shop/dir/trusted-link-building-113719
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-21 21:04:53
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
๐ต๐ฑ
mkey
2026-09-19 08:40:03
(1 month ago)
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT | PORTS=22,23 | HITS=2 | IPSET=ADD | FIRST=2026-09-19 10:34:28 | LAST=2026-09-19 10:34:28. Last seen 2026-09-19 10:34:28.
Port Scan
๐บ๐ธ
้ฌผๅฝฑ233
2026-08-27 15:06:14
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
๐จ๐ญ
backslash
2026-08-27 14:03:03
(2 months ago)
block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB
Bad Web Bot
๐ซ๐ท
Zkillu
2026-08-19 22:11:53
(2 months ago)
UDP flood (DDoS) vs AS215599: 179 pkts / 0.26 MB to UDP 8443 across 108 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. ...
show more
UDP flood (DDoS) vs AS215599: 179 pkts / 0.26 MB to UDP 8443 across 108 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
