🇩🇪
Packets-Decreaser.NET
2026-10-11 01:54:23
(1 day ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇭
m_vlasov
2026-10-10 16:06:55
(1 day ago)
SSH/Telnet honeypot: 0 login attempts, 2 sessions, 0 shell commands.
Port Scan
IoT Targeted
2026-10-06 03:28:51
(6 days ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-10-05 21:05:27
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink. ...
show more
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:05:21.204530 2026] [security2:error] [pid 9169:tid 9169] [client 150.228.105.75:1611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||duermaseaprisa.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "duermaseaprisa.com"] [uri "/"] [unique_id "asQREfq0YO7aQuVz0LupxQAAAAg"], referer: https://bulkbacklinkmaker.space/dir/premium-link-building-59731
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
saamkuu
2026-10-05 05:46:36
(1 week ago)
DDoS botnet: TCP connection flood, 15 connections to port 443.
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-30 11:06:21
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink. ...
show more
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:06:14.484143 2026] [security2:error] [pid 9632:tid 9704] [client 150.228.105.75:49618] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||strengthsmatter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strengthsmatter.com"] [uri "/"] [unique_id "arztJpTIkSRSwyIE-IDXSwAAAUw"], referer: https://seebacklinks.shop/dir/manual-link-building-services-199190
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-30 03:22:41
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 150.228.105.75
2026-09-30T04:05:44+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 150.228.105.75
2026-09-30T04:05:44+02:00 vpn Access-Reject 'abrham' station: 150.228.105.75 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-28 12:22:13
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 150.228.105.75
2026-09-28T12:59:08+02 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 150.228.105.75
2026-09-28T12:59:08+02:00 vpn Access-Reject 'povm97' station: 150.228.105.75 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-28T13:24:26+02:00 vpn Access-Reject 'ross02' station: 150.228.105.75 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
2026-09-21 08:38:35
(3 weeks ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇫🇷
Sklurk
2026-09-20 01:49:51
(3 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 00:36:19
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink. ...
show more
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 20:36:12.759799 2026] [security2:error] [pid 20748:tid 20748] [client 150.228.105.75:15416] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||twinls.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "twinls.com"] [uri "/"] [unique_id "aq8qfLIhl2tbCSIrjlAwAQAAAAs"], referer: https://backlinkschecker.store/dir/seo-backlink-services-219801
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-09-19 00:09:37
(3 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 12:51:20
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink. ...
show more
(mod_security) mod_security (id:210350) triggered by 150.228.105.75 (customer.sfiabgr1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:51:16.505757 2026] [security2:error] [pid 26396:tid 26396] [client 150.228.105.75:38491] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||maunakeavista.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maunakeavista.com"] [uri "/"] [unique_id "aqviRElCmrPe44NH1Aa6owAAAA4"], referer: https://seorankingchecker.space/dir/google-ranking-backlinks-132123
show less
Brute-Force
Bad Web Bot
Web App Attack
🇰🇷
winter
2026-09-03 17:34:40
(1 month ago)
Connection attemp from 150.228.105.75 to port 22
Brute-Force
SSH
🇺🇸
kosada.com
2026-08-31 08:55:59
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
