2026-07-10 11:41:08
(2 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(2 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇺🇸
TPI-Abuse
2026-05-09 18:31:26
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 106.219.122.43 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 106.219.122.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 14:31:20.760215 2026] [security2:error] [pid 8193:tid 8193] [client 106.219.122.43:3265] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||buanamegah.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "buanamegah.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af99eALdzbHrrvwndnNWcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-09 18:18:52
(2 months ago)
[redacted] 106.219.122.43 - - [09/May/2026:20:17:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 106.219.122.43 - - [09/May/2026:20:17:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/72.0.0.0 Safari/537.36"
[redacted] 106.219.122.43 - - [09/May/2026:20:17:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36"
[redacted] 106.219.122.43 - - [09/May/2026:20:18:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36"
[redacted] 106.219.122.43 - - [09/May/2026:20:18:46 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/10.0.0.0 Safari/537.36"
[redacted] 106.219.122.43 - - [09/May/2026:20:18:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Linux; Android 10; arm64) Apple
...
show less
Hacking
Web App Attack
🇩🇪
stinpriza
2026-05-08 18:36:18
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
4server
2026-05-08 18:00:16
(2 months ago)
[FriMay0820:00:14.1472712026][security2:error][pid2356251:tid2356309][client106.219.122.43:0]ModSecu ...
show more
[FriMay0820:00:14.1472712026][security2:error][pid2356251:tid2356309][client106.219.122.43:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"agilityrossoblu.ch\"][uri\"/xmlrpc.php\"][unique_id\"af4krnfZOMX-XKTFaGbmOwAAAE0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-02-25 16:33:10
(5 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-02-17 18:40:07
(5 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇩🇪
bsoft.de
2026-01-17 14:12:47
(6 months ago)
106.219.122.43 - - [17/Jan/2026:14:07:04 +0100] "GET http://source.denx.de/Xenomai/Xenomai/resource/ ...
show more
106.219.122.43 - - [17/Jan/2026:14:07:04 +0100] "GET http://source.denx.de/Xenomai/Xenomai/resource/cgi/resources.pl?expand=%2C2.1%2C4.1%2C2.1.1%2C1%2C2%2C2.2%2C4%2C2.3.6%2C2.1.1.5%2C1.1.2.1%2C2.1.2%2C3%2C1.2.2%2C2.3%2C1.2.1%2C2.1.2.1.1%2C1.1.1%2C4.4%2C2.1.1.3.1%2C2.3.5%2C2.3.4%2C4.2%2C2.1.1.4%2C4.1.2%2C2.2.3%2C4.3%2C2.3.1%2C2.3.7%2C2.2.1%2C2.1.1.3%2C4.1.1%2C2.1.1.1%2C2.1.1.2%2C1.2.3%2C HTTP/1.1" 301 545 "-" "Opera/9.70.(X11; Linux i686; ru-UA) Presto/2.9.165 Version/12.00"
show less
DDoS Attack
🇮🇩
Burayot
2025-11-01 11:08:26
(8 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 106.219.122.43 (IN/India/-): 1 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 106.219.122.43 (IN/India/-): 1 in the last 3600 secs
show less
Web App Attack
2025-11-01 08:49:11
(8 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇫🇷
SpaceHost-Server
2025-10-22 14:35:15
(9 months ago)
106.219.122.43 - - [22/Oct/2025:16:33:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4987 "-" "Mozilla/5. ...
show more
106.219.122.43 - - [22/Oct/2025:16:33:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4987 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
106.219.122.43 - - [22/Oct/2025:16:34:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4987 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36"
106.219.122.43 - - [22/Oct/2025:16:35:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4987 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇩🇪
grassau.com
2025-10-07 18:15:42
(9 months ago)
(wordpress) Failed wordpress login from 106.219.122.43 (IN/India/-)
Brute-Force
🇳🇱
exxos
2025-08-08 17:03:01
(11 months ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-08-03 23:20:31
(11 months ago)
HTTP1.x attacks
DDoS Attack