🇺🇸
TPI-Abuse
2026-07-11 22:47:43
(8 hours ago)
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 18:47:38.913190 2026] [security2:error] [pid 12436:tid 12436] [client 122.96.48.83:54382] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||cameronwv.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "cameronwv.com"] [uri "/"] [unique_id "alLICsCHXmo17T15OgxtwQAAAAo"], referer: http://cameronwv.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 12:44:12
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 08:44:04.255019 2026] [security2:error] [pid 18453:tid 18453] [client 122.96.48.83:28289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||agchurchkuwait.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "agchurchkuwait.com"] [uri "/"] [unique_id "alDpFKLPGXLlnahIMQGceQAAAAM"], referer: http://agchurchkuwait.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 06:33:58
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 02:33:50.396518 2026] [security2:error] [pid 27208:tid 27208] [client 122.96.48.83:28835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.swcbsa.org|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.swcbsa.org"] [uri "/"] [unique_id "alCSTlKIk_9Yn5pLYDxYzQAAAAE"], referer: https://www.swcbsa.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 00:47:34
(2 weeks ago)
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 20:47:26.097001 2026] [security2:error] [pid 7664:tid 7694] [client 122.96.48.83:6543] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.allstartaxidermy.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.allstartaxidermy.com"] [uri "/"] [unique_id "akBvHqemCZa6S4ewPpdcKQAAABc"], referer: http://www.allstartaxidermy.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-06-15 08:57:25
(3 weeks ago)
Port Scan Attack proto:TCP src:14777 dst:23
Port Scan
🇺🇸
RAP
2026-06-14 20:08:20
(3 weeks ago)
2026-06-14 20:08:20 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷
security.rdmc.fr
2026-06-14 02:10:37
(4 weeks ago)
Port Scan Attack proto:TCP src:22936 dst:23
Port Scan
🇺🇸
MPL
2026-06-14 01:55:40
(4 weeks ago)
tcp/23
Port Scan
🇹🇼
kk_it_man
2025-12-30 09:30:01
(6 months ago)
honey catch
Port Scan
🇨🇳
ThreatBook.io
2025-11-09 23:20:16
(8 months ago)
ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/122.96.48.83
SSH
🇧🇾
stroytrest
2025-11-09 11:30:45
(8 months ago)
2025-11-09T14:30:44.380969+03:00 gate kernel: [1992507.178618] nftables: JAIL-TELNET IN=wan OUT= MAC ...
show more
2025-11-09T14:30:44.380969+03:00 gate kernel: [1992507.178618] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=122.96.48.83 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=46 ID=21522 PROTO=TCP SPT=11110 DPT=23 WINDOW=35401 RES=0x00 SYN URGP=0
...
show less
Port Scan
2025-09-29 12:27:00
(9 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-09-24 23:38:06
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 122.96.48.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 19:38:02.454547 2025] [security2:error] [pid 26926:tid 26926] [client 122.96.48.83:15819] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/56300/"] [unique_id "aNSA2sEKHpYiNmFGpPpb2wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RAP
2025-09-18 15:29:04
(9 months ago)
2025-09-18 15:29:04 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇦🇺
Block Rockin' Beats
2025-09-18 11:18:06
(9 months ago)
Attempted connection to TCP port 23
Port Scan