🇺🇸
TPI-Abuse
2026-11-13 04:55:36
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:55:32.087927 2026] [security2:error] [pid 21107:tid 21107] [client 103.174.206.60:54282] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:55:32.087927 2026] [security2:error] [pid 21107:tid 21107] [client 103.174.206.60:54282] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||periodthreads.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodthreads.com"] [uri "/"] [unique_id "avaYRK6vrPAXf_Tl-DliUAAAAAE"], referer: https://inthegladefantasydolls.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:34:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:34:12.263743 2026] [security2:error] [pid 25820:tid 25820] [client 103.174.206.60:55746] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:34:12.263743 2026] [security2:error] [pid 25820:tid 25820] [client 103.174.206.60:55746] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||syscomprint.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "syscomprint.com"] [uri "/"] [unique_id "auORpLJ9zvYDlLGr3hjXRgAAAAM"], referer: https://allinone.co.in/redirect.php?ref_host=test-team-invite-32651.now.sh
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 15:45:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:45:50.905427 2026] [security2:error] [pid 19917:tid 19917] [client 103.174.206.60:42454] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.174.206.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:45:50.905427 2026] [security2:error] [pid 19917:tid 19917] [client 103.174.206.60:42454] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jamisongreen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamisongreen.com"] [uri "/"] [unique_id "atuBLrlnaOAx82_pTACxOwAAAAs"], referer: https://genderdivercity.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
Sawasdee
2026-10-17 06:09:12
UTC ·
(3 weeks ago)
SSH break in attempt
...
SSH
2026-10-15 15:37:14
UTC ·
(4 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
LRob
2026-10-14 16:23:05
UTC ·
(4 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: /calendrier-2/action~agenda/time_limit~1764370800/cat_ids~185/tag_ids~332,535,230,483,215,716/request_format~json/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /calendrier-2/action~agenda/time_limit~1764370800/cat_ids~185/tag_ids~332,535,230,483,215,716/request_format~json/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 | 2026-10-14 16:23 UTC
show less
Bad Web Bot
🇩🇪
LRob
2026-10-14 02:54:26
UTC ·
(4 weeks ago)
Not following 301 redirects — wasted requests | method: GET | path: /info_film.asp | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Bad Web Bot
2026-10-12 20:33:57
UTC ·
(1 month ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇳🇱
Site.eu
2026-10-11 10:45:53
UTC ·
(1 month ago)
Suspicious multiple login attempts
Brute-Force
SSH
🇩🇪
EGP Abuse Dept
2026-10-10 08:06:05
UTC ·
(1 month ago)
Scraping webshop URLs (www.nobelproducts.nl), likely botnet drone
Bad Web Bot
Exploited Host
🇬🇧
BananaLlama
2026-10-08 10:13:21
UTC ·
(1 month ago)
Unsolicited SSH (TCP/22) connection attempts blocked at edge firewall; no public SSH service is exposed.
Port Scan
SSH
🇦🇺
MAGIC
2026-10-08 03:01:22
UTC ·
(1 month ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-10-06 07:20:44
UTC ·
(1 month ago)
[redacted] 103.174.206.60 - - [06/Oct/2026:09:19:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
[redacted] 103.174.206.60 - - [06/Oct/2026:09:20:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 42 ...
show more
[redacted] 103.174.206.60 - - [06/Oct/2026:09:19:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
[redacted] 103.174.206.60 - - [06/Oct/2026:09:20:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 103.174.206.60 - - [06/Oct/2026:09:20:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 103.174.206.60 - - [06/Oct/2026:09:20:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 103.174.206.60 - - [06/Oct/2026:09:20:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site70060332.com"
...
show less
Hacking
Web App Attack
🇩🇪
wiredalter
2026-10-05 11:55:26
UTC ·
(1 month ago)
Blocked by UFW on dVPS [22/tcp]
Source Port: 39420
TTL: 53
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
Port Scan
Brute-Force
🇫🇷
Lunix
2026-10-04 10:42:50
UTC ·
(1 month ago)
Brute-Force
Web App Attack
