🇨🇭
cybsecaoccol
2026-10-19 08:44:25
(23 hours ago)
unauthorized connection or malicious port scan attempted on tcp port 22 - sch
Port Scan
Hacking
🇫🇮
saamkuu
2026-10-16 05:46:17
(4 days ago)
DDoS botnet: TCP connection flood, 3 connections to port 443.
DDoS Attack
🇺🇸
TPI-Abuse
2026-10-14 17:46:00
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): ...
show more
(mod_security) mod_security (id:225170) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:45:55.561581 2026] [security2:error] [pid 3315:tid 3320] [client 102.211.145.29:57738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rawhabitat.philacentric.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rawhabitat.philacentric.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-_0_OJ2XTiiKT03tLCcQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 00:52:01
(6 days ago)
WEB attack
Brute-Force
🇩🇪
LRob
2026-10-13 17:12:52
(6 days ago)
Not following 301 redirects — wasted requests | method: GET | path: http://escrime-auvergnerhonealpe ...
show more
Not following 301 redirects — wasted requests | method: GET | path: http://escrime-auvergnerhonealpes.fr/calendrier-2/action~agenda/cat_ids~142/tag_ids~328,280,716,239,399,451/request_format~json/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
show less
Bad Web Bot
2026-10-11 10:37:35
(1 week ago)
5615/udp (1 or more attempts)
Port Scan
🇹🇷
neron
2026-10-09 17:38:09
(1 week ago)
CrowdSec blocked: local/ssh-bruteforce detected via OPNsense firewall
Hacking
Web App Attack
🇵🇱
bmino.pl
2026-10-06 20:01:13
(1 week ago)
Autoban IP(2): 102.211.145.29 - Hostname: Unwired Communications Ltd - City: Nairobi - Country: Keny ...
show more
Autoban IP(2): 102.211.145.29 - Hostname: Unwired Communications Ltd - City: Nairobi - Country: Kenya - Organization: AS328490 Unwired Communications Limited - Reason: GET /?n=pgro189pcmjf11893mqeubr HTTP/1.1
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 16:17:04
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): ...
show more
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 12:16:57.040182 2026] [security2:error] [pid 17550:tid 17550] [client 102.211.145.29:51926] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||suretrap.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "suretrap.com"] [uri "/"] [unique_id "asPNeY8U6RZU2WvAsIp1VwAAAAM"], referer: https://automaticlinkbuilding.site/dir/seo-link-building-experts-201286
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 14:57:33
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): ...
show more
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 10:57:29.893160 2026] [security2:error] [pid 3696:tid 3696] [client 102.211.145.29:37962] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||despojosocial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "despojosocial.com"] [uri "/"] [unique_id "asEX2agnZHyQIu5PPdIxvgAAAAk"], referer: https://massbacklinkmaker.store/dir/strong-domain-backlinks-53670
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-10-01 00:10:02
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇳🇱
overture.bar
2026-09-28 08:14:42
(3 weeks ago)
Blocked by UFW on NsmallFE [23/tcp] | SPT: 56810 | TTL: 55 | LEN: 60 | TOS: 0x00
Port Scan
IoT Targeted
🇩🇪
KPS
2026-09-26 18:59:33
(3 weeks ago)
PortscanT
Port Scan
🇭🇰
mutebot.net
2026-09-25 13:42:33
(3 weeks ago)
SRC=102.211.145.29, PROTO=TCP, SPT=58512, DPT=23
Port Scan
🇺🇸
TPI-Abuse
2026-09-25 09:10:13
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): ...
show more
(mod_security) mod_security (id:210350) triggered by 102.211.145.29 (102.211.145.29.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:10:07.635614 2026] [security2:error] [pid 29967:tid 30023] [client 102.211.145.29:39276] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gafm.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gafm.org"] [uri "/"] [unique_id "arY6b3RDbrUqY2An2javYQAAANY"], referer: https://www.edx.org/become/how-to-become-a-wealth-management-advisor
show less
Brute-Force
Bad Web Bot
Web App Attack
