🇺🇸
TPI-Abuse
2026-11-06 18:44:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 167.56.212.66 (r167-56-212-66.dialup.adsl.anteldata.net.uy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:44:21.308384 2026] [security2:error] [pid 18238 ...
show more
(mod_security) mod_security (id:210350) triggered by 167.56.212.66 (r167-56-212-66.dialup.adsl.anteldata.net.uy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:44:21.308384 2026] [security2:error] [pid 18238:tid 18238] [client 167.56.212.66:50722] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ea2cdy.es|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ea2cdy.es"] [uri "/dmr-.html"] [unique_id "au4gBZIED-Gcrw69CspmHgAAAB0"], referer: https://ea2cdy.es/imsitemap.html
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-08 04:01:40
UTC ·
(1 year ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇹🇼
AndCycle
2023-10-05 21:32:15
UTC ·
(3 years ago)
Oct 6 05:30:54 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=56457,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 [email protected]
Oct 6 05:30:57 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=58018,msg="53 ...
show more
Oct 6 05:30:54 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=56457,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 [email protected]
Oct 6 05:30:57 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=58018,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 andcycle
Oct 6 05:31:09 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=64274,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 [email protected]
Oct 6 05:31:13 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=49767,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 andcycle
Oct 6 05:32:15 bacztwo courieresmtpd: error,relay=::ffff:167.56.212.66,port=59028,msg="535 Authentication failed.",cmd: AUTH CRAM-MD5 [email protected]
...
show less
Email Spam
Brute-Force
🇹🇼
AndCycle
2023-10-05 21:30:47
UTC ·
(3 years ago)
localhost 167.56.212.66 - - [06/Oct/2023:05:30:42 +0800] "GET /administrator/ HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:43 +0800] "GET /wp-login.php ...
show more
localhost 167.56.212.66 - - [06/Oct/2023:05:30:42 +0800] "GET /administrator/ HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:43 +0800] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:43 +0800] "GET /phpmyadmin/ HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:44 +0800] "GET /phpMyAdmin/ HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:44 +0800] "GET /admin.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" VLOG=-
localhost 167.56.212.66 - - [06/Oct/2023:05:30:45 +0800] "GET /PhpMyAdmin/ HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Geck
...
show less
Web App Attack
🇩🇪
MarkGGN
2023-10-05 15:33:57
UTC ·
(3 years ago)
SMTP Bruteforce. 2023-10-05T17:33:33.215144+02:00 * postfix/smtpd[3126728]: NOQUEUE: reject: RCPT from r167-56-212-66.dialup.adsl.anteldata.net.uy[167.56.212.66]: 554 5.7.1 <*>: Relay access denied; from=<*> to=<*> proto=ESMTP helo=<r167-56-212-66.di ...
show more
SMTP Bruteforce. 2023-10-05T17:33:33.215144+02:00 * postfix/smtpd[3126728]: NOQUEUE: reject: RCPT from r167-56-212-66.dialup.adsl.anteldata.net.uy[167.56.212.66]: 554 5.7.1 <*>: Relay access denied; from=<*> to=<*> proto=ESMTP helo=<r167-56-212-66.dialup.adsl.anteldata.net.uy>
2023-10-05T17:33:56.782938+02:00 * postfix/smtpd[3126728]: NOQUEUE: reject: RCPT from r167-56-212-66.dialup.adsl.anteldata.net.uy[167.56.212.66]: 554 5.7.1 <*>: Relay access denied; from=<*> to=<*> proto=ESMTP helo=<r167-56-212-66.dialup.adsl.anteldata.net.uy>
show less
Brute-Force
🇫🇷
Papy Abuse
2023-10-05 15:14:37
UTC ·
(3 years ago)
scanlogd
Port Scan
