🇷🇴
DamonOne
2026-11-06 12:21:43
UTC ·
(1 week ago)
Blocked by OPNsense; 3 hits, proto=udp, ports=3097
Port Scan
Hacking
🇷🇴
DamonOne
2026-11-06 11:42:02
UTC ·
(1 week ago)
Blocked by OPNsense; 3 hits, proto=udp, ports=3097,9591
Port Scan
Hacking
🇮🇩
David Koswari
2026-08-14 05:09:00
UTC ·
(3 months ago)
REQ_BLOCKED_ACL
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇫🇷
Sklurk
2026-04-12 03:09:20
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-10-05 01:54:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:217291) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 21:54:11.319608 2025] [security2:error] [pid 15382:tid 15382] [client 111.14.159.181:62097] ...
show more
(mod_security) mod_security (id:217291) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 21:54:11.319608 2025] [security2:error] [pid 15382:tid 15382] [client 111.14.159.181:62097] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(\\\\n|\\\\r)" at ARGS_NAMES:\\r\\ne\\r\\nm. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "145"] [id "217291"] [rev "2"] [msg "HTTP Header Injection Attack via payload (CR/LF detected)||kountz.org|F|2"] [data "Matched Data: \\x0d found within ARGS_NAMES:\\x5cr\\x5cne\\x5cr\\x5cnm: \\x0d\\x0ae\\x0d\\x0am"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kountz.org"] [uri "/calendar.php"] [unique_id "aOHPwzXTUiHFb6zuONSoLAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-26 06:31:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 26 02:31:12.226095 2025] [security2:error] [pid 26574:tid 26574] [client 111.14.159.181:40569] ...
show more
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 26 02:31:12.226095 2025] [security2:error] [pid 26574:tid 26574] [client 111.14.159.181:40569] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/956/game/83607/"] [unique_id "aNYzMALfQWvvSn2G1C5LAQAAABc"], referer: https://www.renju.net/tournament/956/game/83607
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2025-09-23 07:13:12
UTC ·
(1 year ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-23 04:00:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 00:00:20.536087 2025] [security2:error] [pid 32237:tid 32237] [client 111.14.159.181:24039] ...
show more
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 00:00:20.536087 2025] [security2:error] [pid 32237:tid 32237] [client 111.14.159.181:24039] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/2716/game/112193/"] [unique_id "aNIbVPej81veTy4IvO-VnQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 21:32:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 17:32:33.973674 2025] [security2:error] [pid 24250:tid 24250] [client 111.14.159.181:19456] ...
show more
(mod_security) mod_security (id:210350) triggered by 111.14.159.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 17:32:33.973674 2025] [security2:error] [pid 24250:tid 24250] [client 111.14.159.181:19456] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/3020/game/150544"] [unique_id "aMM_8SyWCMathc64frN0UwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
