๐ฉ๐ช
LRob
2026-10-07 05:39:34
(1 week ago)
Shop search flood (L7 DDoS) | path: /92-vtt-electrique-all-mountain | query: order=product.position. ...
show more
Shop search flood (L7 DDoS) | path: /92-vtt-electrique-all-mountain | query: order=product.position.asc&page=2&productListView=list&q=Taille-L | src_port: 26298
show less
DDoS Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 06:44:05
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.235.223.187 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 147.235.223.187 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 02:44:02.396335 2026] [security2:error] [pid 28264:tid 28264] [client 147.235.223.187:12935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nigunensemble.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nigunensemble.net"] [uri "/"] [unique_id "arYYMj8OX6uAN_MyiPzBAwAAABA"], referer: https://alcalasingle.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
MPL
2026-09-05 14:06:10
(1 month ago)
tcp/23
Port Scan
๐ฉ๐ช
bescared
2026-09-05 08:10:07
(1 month ago)
F2B - Malicious activity detected. Unauthorized connection attempt: SSH. -151302cd-
Port Scan
SSH
๐บ๐ธ
xmission.com
2026-09-03 07:40:39
(1 month ago)
Blocked by UFW (TCP on 23)
Source port: 13261
TTL: 45
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 23)
Source port: 13261
TTL: 45
Packet length: 60
TOS: 0x08
This report (for 147.235.223.187) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
๐บ๐ธ
kosada.com
2026-08-25 06:16:16
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-11 03:17:50
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
kosada.com
2026-07-26 21:48:19
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐จ๐ณ
้น้น
2026-07-16 08:05:00
(3 months ago)
monitor: on VM-0-7-ubuntu | port: 56064 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 56064 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
kosada.com
2026-07-12 03:04:43
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ฉ๐ช
Vegascosmetics
2026-06-29 13:46:34
(3 months ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
๐ฎ๐ฉ
hermawan
2026-05-08 16:43:36
(5 months ago)
[Fri May 08 22:58:51.895371 2026] [security2:error] [pid 404945:tid 140230615103168] [client 147.235 ...
show more
[Fri May 08 22:58:51.895371 2026] [security2:error] [pid 404945:tid 140230615103168] [client 147.235.223.187:54835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Brave" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "295"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Brave found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/88.0.4324.152 Safari/537.36 request_line = GET /index.php/prakiraan-bulanan/4179-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur/prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tanaman-di-provinsi-jawa-timur-tahun-2023/555560092-prakiraan-bulanan-tingkat-ketersediaan-air-bagi-tan..."] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-bulanan/4179-prakiraa
...
show less
Email Spam
Hacking
๐บ๐ธ
xmission.com
2026-01-13 21:42:00
(9 months ago)
Blocked by UFW (TCP on 23)
Source port: 12795
TTL: 44
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 23)
Source port: 12795
TTL: 44
Packet length: 60
TOS: 0x08
This report (for 147.235.223.187) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
๐ฎ๐น
VHosting
2025-12-23 14:35:17
(9 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
Anonymous
2025-12-12 15:27:46
(10 months ago)
botnet
DDoS Attack