๐ช๐ธ
librebit
2026-08-24 16:22:42
(2 days ago)
Brute force
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-24 14:29:16
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 102.68.78.78 (102.68.78.78.unwired.co.ke): 1 in ...
show more
(mod_security) mod_security (id:210350) triggered by 102.68.78.78 (102.68.78.78.unwired.co.ke): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 10:29:12.455131 2026] [security2:error] [pid 26451:tid 26451] [client 102.68.78.78:43048] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||davidocchino.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davidocchino.com"] [uri "/adminer-4.8.1-en.php"] [unique_id "aoxVOO1g3OHsE98BIh-R9wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-24 05:57:26
(2 days ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
๐บ๐ธ
gui-ying233
2026-08-23 07:07:03
(3 days ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
pltcldvlpr
2026-08-21 12:25:55
(5 days ago)
Bogus Useragent: 102.68.78.78 - - [21/Aug/2026:14:25:55 +0200] "GET /protocol?id=nw_18_103&offset=90 ...
show more
Bogus Useragent: 102.68.78.78 - - [21/Aug/2026:14:25:55 +0200] "GET /protocol?id=nw_18_103&offset=900&seq=790 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.2; Trident/5.0)" asn=328490 org="Unwired Communications Limited" country=KE
...
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-18 06:22:17
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
cybsecaoccol
2026-08-17 17:43:18
(1 week ago)
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
Anonymous
2026-08-15 14:17:19
(1 week ago)
denied traffic to a honeypot network. destination port 37686.
Port Scan
Hacking
๐ธ๐ฌ
mypatricks
2026-06-16 05:59:49
(2 months ago)
102.68.78.78 | Port: 11133 | DNS: 102.68.78.78.unwired.co.ke 2026-06-16T13:59:47+08:00 Africa/Nairob ...
show more
102.68.78.78 | Port: 11133 | DNS: 102.68.78.78.unwired.co.ke 2026-06-16T13:59:47+08:00 Africa/Nairobi | Apple Identity Spoofing | UA: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:128.0) Gecko/20100101 Firefox/128.0 HTTP/1.1 443 GET | URL: /ms?1781325226&fe9bdac8d9a9e8a=708 | Ref: - | Country: KE/Kenya/+03:00 IP City: Nakuru a0c797229a1288b8-NBO/Nairobi, Kenya 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐บ๐ธ
kosada.com
2026-06-15 17:14:41
(2 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
๐ฉ๐ช
SMARTNET
2026-05-27 06:03:53
(2 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 991a3054-d12a-4e5e-ac87-2c17a3082180
DDoS Attack
Anonymous
2026-05-22 17:57:53
(3 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
Anonymous
2026-05-17 04:19:00
(3 months ago)
Attack Signature Blocked: /wishlist/index/add/product/11177/form_key/uQt1REX4gUchBopc/ (Magento Site ...
show more
Attack Signature Blocked: /wishlist/index/add/product/11177/form_key/uQt1REX4gUchBopc/ (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322)
show less
Web App Attack
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2023-04-15 08:04:17
(3 years ago)
102.68.78.78 - - [15/Apr/2023:11:04:14 +0300] "GET /wp-login.php HTTP/1.1" 404 276 "-" "Mozilla/5.0 ...
show more
102.68.78.78 - - [15/Apr/2023:11:04:14 +0300] "GET /wp-login.php HTTP/1.1" 404 276 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
102.68.78.78 - - [15/Apr/2023:11:04:15 +0300] "GET /xmlrpc.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
...
show less
Web App Attack
๐จ๐ฆ
Justmee
2023-02-10 04:17:05
(3 years ago)
Feb 9 21:17:02 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c: ...
show more
Feb 9 21:17:02 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:a8:44:45:08:00 SRC=102.68.78.78 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=48286 DF PROTO=TCP SPT=53673 DPT=8892 SEQ=2678823146 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00103030801010402) MARK=0x8000000
Feb 9 21:17:03 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:a8:44:45:08:00 SRC=102.68.78.78 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=48288 DF PROTO=TCP SPT=53673 DPT=8892 SEQ=2678823146 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00103030801010402) MARK=0x8000000
Feb 9 21:17:05 RT-AX58U-50D8-8E617D2-C kernel: DROP IN=eth4 OUT=br0 MAC=d4:be:d9:99:6f:95:00:01:5c:a8:44:45:08:00 SRC=102.68.78.78 DST=192.168.100.108 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=48289 DF PROTO=TCP SPT=53673 DPT=8892 SEQ=2678823146 ACK=0 WINDOW=64240 RES=0x00 SYN URGP=0 OPT (020405A00103030801010402) MARK=0x8000000
...
show less
Hacking
Brute-Force