🇺🇸
kosada.com
2026-11-13 08:51:25
UTC ·
(1 day ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=45&topics%5B5%5D=27&topics%5B6%5D=29&topics%5B7%5D=52 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=45&topics%5B5%5D=27&topics%5B6%5D=29&topics%5B7%5D=52 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Safari/605.1.15")
show less
DDoS Attack
Bad Web Bot
🇺🇸
jakob
2026-11-11 00:41:13
UTC ·
(3 days ago)
Fail2Ban rule: apache-cgit (robots.txt violation)
Bad Web Bot
🇳🇱
IPCollective Intelligence
2026-11-10 00:50:27
UTC ·
(4 days ago)
Residential Proxy - IPCollective Intelligence
Open Proxy
🇩🇪
nyuuzyou
2026-11-04 11:08:21
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-04T11:08:21Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-01 16:50:08
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T16:50:08Z.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 10:50:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 103.96.38.65 (103.96.38.65.stargatecommunications.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:49:58.244444 2026] [security2:error] [pid 5804:tid 5 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.96.38.65 (103.96.38.65.stargatecommunications.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:49:58.244444 2026] [security2:error] [pid 5804:tid 5804] [client 103.96.38.65:51942] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||inquisitivequincie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "inquisitivequincie.com"] [uri "/"] [unique_id "atyNVln4NAHiMMeCCCTLZwAAAAg"], referer: https://metamagic.top/stats/43966
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 00:00:00
UTC ·
(1 month ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇳🇱
soverin
2026-10-08 22:40:20
UTC ·
(1 month ago)
spam
Email Spam
🇺🇸
shaunc
2026-10-08 20:56:09
UTC ·
(1 month ago)
Oct 8 15:56:07 mailman postfix/smtpd[983]: warning: unknown[103.96.38.65]: SASL PLAIN authentication failed: authentication failure
Brute-Force
2026-10-08 20:17:13
UTC ·
(1 month ago)
SMTP brute force - auth failed
Brute-Force
Exploited Host
🇫🇷
smtp.com.es
2026-10-08 19:35:44
UTC ·
(1 month ago)
Brute force attempt.
Brute-Force
Email Spam
🇳🇱
maxxsense
2026-10-06 20:56:54
UTC ·
(1 month ago)
(postfix-unknown) Failed postfix unknown login with username [redacted] from 103.96.38.65 (BD/Bangladesh/103.96.38.65.stargatecommunications.com)
Hacking
2026-10-06 19:38:12
UTC ·
(1 month ago)
2026-10-06T22:38:12.049350+03:00 shell.l3.fi postfix/smtps/smtpd[2519]: warning: unknown[103.96.38.65]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=manakivig06
2026-10-06T22:38:12.263941+03:00 shell.l3.fi postfix/smtps/smtpd ...
show more
2026-10-06T22:38:12.049350+03:00 shell.l3.fi postfix/smtps/smtpd[2519]: warning: unknown[103.96.38.65]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=manakivig06
2026-10-06T22:38:12.263941+03:00 shell.l3.fi postfix/smtps/smtpd[2519]: disconnect from unknown[103.96.38.65] ehlo=1 auth=0/1 commands=1/2
...
show less
Email Spam
Brute-Force
🇺🇸
kosada.com
2026-10-06 00:17:12
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=38&topics%5B3%5D=34&topics%5B4%5D=32&topics%5B5%5D=56 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B1%5D=38&topics%5B3%5D=34&topics%5B4%5D=32&topics%5B5%5D=56 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 06:07:08
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 103.96.38.65 (103.96.38.65.stargatecommunications.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:07:02.123630 2026] [security2:error] [pid 488:tid 48 ...
show more
(mod_security) mod_security (id:210350) triggered by 103.96.38.65 (103.96.38.65.stargatecommunications.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 02:07:02.123630 2026] [security2:error] [pid 488:tid 488] [client 103.96.38.65:56364] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stormwlf.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stormwlf.com"] [uri "/"] [unique_id "ar34hoPsXAMMRU55te17TAAAABs"], referer: https://makebacklinksfree.website/dir/high-dr-backlinks-198869
show less
Brute-Force
Bad Web Bot
Web App Attack
