|
🇫🇷
Murazaki
|
|
158.178.246.35 - - [02/Sep/2025:13:18:29 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" " ...
show more
158.178.246.35 - - [02/Sep/2025:13:18:29 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" "-" "-"
...
show less
|
Hacking
|
|
|
🇫🇷
Murazaki
|
|
158.178.246.35 - - [25/Aug/2025:23:30:44 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" " ...
show more
158.178.246.35 - - [25/Aug/2025:23:30:44 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 500 170 "-" "-" "-"
...
show less
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 17:38:28.439087 2025] [security2:error] [pid 24035:tid 24035] [client 158.178.246.35:35974] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.register-yacht-belize.com:443|F|4"] [data "CONNECT www.register-yacht-belize.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.register-yacht-belize.com"] [uri "/"] [unique_id "aKzX1IQoYG2GwvrlBDjGVgAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210740) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 19:23:17.862572 2025] [security2:error] [pid 29269:tid 29269] [client 158.178.246.35:46942] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.skinnywheels.com:443|F|4"] [data "/proxy-connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.skinnywheels.com"] [uri "/"] [unique_id "aKpNZQMn05-jT5jUuVlWsgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 01:44:50.471683 2025] [security2:error] [pid 21504:tid 21504] [client 158.178.246.35:51092] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||weathercarib.com:443|F|4"] [data "CONNECT weathercarib.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "weathercarib.com"] [uri "/"] [unique_id "aJ7JUlCie8y34GhFPvFuVwAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 158.178.246.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 02 15:28:58.472764 2025] [security2:error] [pid 11881:tid 11881] [client 158.178.246.35:48058] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.marxistphilosophy.org:443|F|4"] [data "CONNECT www.marxistphilosophy.org:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.marxistphilosophy.org"] [uri "/"] [unique_id "aI5m-uCMqazLLOHRZf1iiAAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
antlac1
|
|
crowdsecurity/http-open-proxy
|
Brute-Force
Web App Attack
|
|
|
🇧🇬
cheatmaster.store
|
|
Open proxy and SSH brute force activity detected from VPS logs
|
Open Proxy
Brute-Force
|
|
|
🇧🇬
cheatmaster.store
|
|
Open proxy and SSH brute force activity detected from VPS logs
|
Open Proxy
Brute-Force
|
|
|
🇩🇪
CommanderRoot
|
|
Invalid HTTP request flood
|
DDoS Attack
Web Spam
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
Anonymous
|
|
Ports: *; Direction: 0; Trigger: CT_LIMIT
|
Brute-Force
SSH
|
|