2026-08-20 16:49:48
(2 hours ago)
Blocked by ModSec and CSF
Port Scan
🇺🇸
kosada.com
2026-08-11 16:23:24
(1 week ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-31 03:55:28
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇮🇩
sockominfo
2026-07-27 07:00:53
(3 weeks ago)
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6.2/10 (MEDIUM). Confidence ...
show more
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-27 06:00:53
(3 weeks ago)
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6.3/10 (MEDIUM). Confidence ...
show more
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-07-27 05:00:09
(3 weeks ago)
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6/10 (MEDIUM). Reported by ...
show more
Zimbra: Login failures from malicious IP: 103.133.174.234. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-06-26 19:19:49
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-02 23:25:33
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 103.133.174.234 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 103.133.174.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:25:27.659414 2026] [security2:error] [pid 32131:tid 32131] [client 103.133.174.234:54040] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hayrun.com|F|2"] [data ".hayrun.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hayrun.com"] [uri "/blog/home/renovation-photos/www.hayrun.com"] [unique_id "ah9mZ72-OnisVeLN6lY9qwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
A000Z
2026-04-24 07:20:28
(3 months ago)
Fail2Ban: 103.133.174.234 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/ ...
show more
Fail2Ban: 103.133.174.234 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0
show less
Bad Web Bot
🇺🇸
kosada.com
2026-03-20 21:12:37
(4 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-01-11 06:21:34
(7 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇩🇪
ghostwarriors
2025-12-30 07:50:46
(7 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2025-12-30 07:42:30
(7 months ago)
2025/12/30 08:42:29 [error] 19#614241: *7652148 access forbidden by rule, client: 103.133.174.234, s ...
show more
2025/12/30 08:42:29 [error] 19#614241: *7652148 access forbidden by rule, client: 103.133.174.234, server: new.hondaforum.hu, request: "GET /topic/adas-vetel-kerdesei-es-valaszai/989326/ HTTP/2.0", host: "new.hondaforum.hu"
...
show less
Web Spam
2025-11-19 00:53:36
(9 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-17 05:48:41
(9 months ago)
scanning http requests from known botnet
Web App Attack