🇪🇸
librebit
2026-11-01 01:37:57
UTC ·
(1 week ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-10-31 00:57:26
UTC ·
(1 week ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-10-14 05:49:10
UTC ·
(3 weeks ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-10-12 11:48:00
UTC ·
(4 weeks ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇱
ifiguero
2026-09-28 21:06:42
UTC ·
(1 month ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
🇪🇸
librebit
2026-09-27 22:59:13
UTC ·
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-25 00:53:10
UTC ·
(1 month ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-09-24 03:05:45
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 116.204.43.50 (ecs-116-204-43-50.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:05:38.530933 2026] [security2:error] [pid 24285: ...
show more
(mod_security) mod_security (id:210730) triggered by 116.204.43.50 (ecs-116-204-43-50.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:05:38.530933 2026] [security2:error] [pid 24285:tid 24285] [client 116.204.43.50:40110] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.danialias.com|F|2"] [data ".shakingasia.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.danialias.com"] [uri "/news/tag/proyectos/www.shakingasia.com"] [unique_id "arSTggRVVXzkEl6y8JxLTQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-09-22 11:56:49
UTC ·
(1 month ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 116.204.43.50: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 116.204.43.50: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇭🇰
keledipan
2026-09-18 09:25:57
UTC ·
(1 month ago)
116.204.43.50 - - [18/Sep/2026:17:25:55 +0800] "GET /home.php?mod=spacecp&ac=favorite&type=thread&id=6548&formhash=672c73cc HTTP/1.1" 200 4501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0. ...
show more
116.204.43.50 - - [18/Sep/2026:17:25:55 +0800] "GET /home.php?mod=spacecp&ac=favorite&type=thread&id=6548&formhash=672c73cc HTTP/1.1" 200 4501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
116.204.43.50 - - [18/Sep/2026:17:25:57 +0800] "GET /home.php?mod=spacecp&ac=favorite&type=thread&id=6548&formhash=672c73cc HTTP/1.1" 200 1223 "https://www.dospy.wang/home.php?mod=spacecp&ac=favorite&type=thread&id=6548&formhash=672c73cc" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-09-12 05:02:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210381) triggered by 116.204.43.50 (ecs-116-204-43-50.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:02:48.029909 2026] [security2:error] [pid 32637: ...
show more
(mod_security) mod_security (id:210381) triggered by 116.204.43.50 (ecs-116-204-43-50.compute.hwclouds-dns.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:02:48.029909 2026] [security2:error] [pid 32637:tid 32649] [client 116.204.43.50:46816] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.mentzlaw.com|F|4"] [data "REQUEST_URI=/injurylawlawyerlouisianarodsuitwelding/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/injurylawlawyerlouisianarodsuitwelding/%url%"] [unique_id "aqTc-Pm2k2tBVJjktuEXJwAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-11 23:41:22
UTC ·
(1 month ago)
PAD: Bot_Add_Cart detected
Bad Web Bot
🇨🇭
backslash
2026-09-06 11:42:00
UTC ·
(2 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
Zandro
2026-09-04 21:00:14
UTC ·
(2 months ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇪🇸
librebit
2026-09-03 11:10:15
UTC ·
(2 months ago)
Brute force
Brute-Force
