🇻🇳
Xuan Can
2026-11-08 20:09:57
UTC ·
(1 day ago)
(mod_security) mod_security (id:1010119) triggered by 14.191.209.185 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:09:49.403847 2026] [security2:error] [pid 4926:tid 5129] ...
show more
(mod_security) mod_security (id:1010119) triggered by 14.191.209.185 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:09:49.403847 2026] [security2:error] [pid 4926:tid 5129] [client 14.191.209.185:0] ModSecurity: Access denied with code 500 (phase 2). Pattern match "union" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "39"] [id "1010119"] [severity "CRITICAL"] [hostname "kb.pavietnam.vn"] [uri "/toan-tu-union-trong-sql-server.html"] [unique_id "avDXDd2YKLkidfe2LHNQ_wAADgA"]
show less
Brute-Force
SSH
🇩🇪
LRob
2026-10-08 15:40:27
UTC ·
(1 month ago)
Shop search flood (L7 DDoS) | path: /97-vtc-all-road-electrique | query: q=Taille-XS-S-M-XXL/Marque-Scott | src_port: 17123
DDoS Attack
Web App Attack
🇩🇪
EGP Abuse Dept
2026-07-22 01:00:28
UTC ·
(3 months ago)
Scanning for port/service exploits on tpc-027.mach3builders.nl
Port Scan
Hacking
2026-04-23 00:16:50
UTC ·
(6 months ago)
SMTP brute force - auth failed
Brute-Force
Exploited Host
🇫🇮
danskefilm.dk
2026-04-22 03:46:01
UTC ·
(6 months ago)
SMTP login brute-force attempt.
Brute-Force
2026-04-22 03:33:30
UTC ·
(6 months ago)
$f2bV_matches
Email Spam
Brute-Force
🇨🇿
lp
2026-04-22 03:19:47
UTC ·
(6 months ago)
Email account brute force: 6 attempts were recorded from 14.191.209.185
2026-04-22T03:47:36+02:00 warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:36+02:00 warni ...
show more
Email account brute force: 6 attempts were recorded from 14.191.209.185
2026-04-22T03:47:36+02:00 warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:36+02:00 warning: unknown[14.191.209.185]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:54+02:00 warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:54+02:00 warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:55+02:00 warning: unknown[14.191.209.185]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-04-22T03:47:55+02:00 warning: unknown[14.191.209.185]: SASL LOGIN authentication fai
show less
Brute-Force
🇫🇷
dwmp
2026-04-22 01:34:16
UTC ·
(6 months ago)
Apr 22 03:34:14 webcore postfix/smtpd[2611677]: warning: unknown[14.191.209.185]: SASL CRAM-MD5 authentication failed: authentication failure
Apr 22 03:34:15 webcore postfix/smtpd[2611677]: warning: unknown[14.191.209.185]: SASL PLAIN authentication ...
show more
Apr 22 03:34:14 webcore postfix/smtpd[2611677]: warning: unknown[14.191.209.185]: SASL CRAM-MD5 authentication failed: authentication failure
Apr 22 03:34:15 webcore postfix/smtpd[2611677]: warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: authentication failure
Apr 22 03:34:16 webcore postfix/smtpd[2611677]: warning: unknown[14.191.209.185]: SASL LOGIN authentication failed: authentication failure
...
show less
Brute-Force
🇨🇭
backslash
2026-04-19 18:06:03
UTC ·
(6 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇨🇿
janekCZ
2026-04-17 07:25:59
UTC ·
(6 months ago)
Fail2Ban report from jail 'postfix': 2026-04-17T09:25:58.116412+02:00 mail postfix/smtps/smtpd[672955]: warning: unknown[14.191.209.185]: SASL PLAIN authentication failed: (reason unavailable),
[email protected]
...
Brute-Force
SSH
2026-04-17 04:30:45
UTC ·
(6 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
2026-04-17 02:44:23
UTC ·
(6 months ago)
Authentication failure
Brute-Force
2026-03-29 00:33:56
UTC ·
(7 months ago)
DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent. ...
show more
DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443.
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-03-18 13:06:24
UTC ·
(7 months ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇫🇷
Sklurk
2026-03-07 07:28:14
UTC ·
(8 months ago)
Web App Attack
Web App Attack
