|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 170.82.79.181 (170-82-79-181.thefiber.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 03:02:00.871307 2026] [security2:error] [pid 19972:tid 19972] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 170.82.79.181 (170-82-79-181.thefiber.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 03:02:00.871307 2026] [security2:error] [pid 19972:tid 19972] [client 170.82.79.181:44504] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||schonmusic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "schonmusic.com"] [uri "/"] [unique_id "asc_6D2sY8i0vQm3acGDzAAAAAs"], referer: https://localcitations.site/dir/strong-domain-backlinks-146170
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 170.82.79.181 (170-82-79-181.thefiber.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:44:30.911973 2026] [security2:error] [pid 16148:tid 16148] [c ...
show more
(mod_security) mod_security (id:210350) triggered by 170.82.79.181 (170-82-79-181.thefiber.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:44:30.911973 2026] [security2:error] [pid 16148:tid 16148] [client 170.82.79.181:44445] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||avanyupublishing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "avanyupublishing.com"] [uri "/"] [unique_id "aroMzpmJrh4VQ05CSIdiWgAAACY"], referer: https://bulkpachecker.shop/dir/trusted-domain-backlinks-16371
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
kosada.com
|
|
Web bot: denial-of-service flood
|
DDoS Attack
Bad Web Bot
|
|
🇮🇩
hermawan
|
|
[Wed Jun 17 23:23:49.175586 2026] [security2:error] [pid 1853343:tid 139897703716544] [client 170.82.79.181:4367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/ ...
show more
[Wed Jun 17 23:23:49.175586 2026] [security2:error] [pid 1853343:tid 139897703716544] [client 170.82.79.181:4367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bing.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bing.go.id found within REQUEST_HEADERS:Referer: https://www.bing.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "ajLKFVX_0i5JNrdEJjtOUQAByAs"], referer https://www.bing.go.id/ [
...
show less
|
Email Spam
Hacking
|
|
🇬🇧
killian7603
|
|
Logon Policy Violation
|
Email Spam
Spoofing
Brute-Force
|
|
🇲🇾
syokadmin
|
|
(cpanel) Failed cPanel login from 170.82.79.181 (BR/Brazil/-): 1 in the last 3600 secs
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
🇩🇪
Pingger Shikkoken
|
|
Participating in DDoS Amplification Attack! Sending 12 requests over 16s asking for ?0? of apple.com, cisco.com, atlassian.com
|
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
|
|
🇩🇪
singertc
|
|
|
Email Spam
Hacking
|
|
🇩🇪
freezweb
|
|
DKIM Report of sending mails for freezweb.de
|
Email Spam
|
|
🇩🇪
singertc
|
|
2023-02-20 08:36:25 H=170-82-79-181.thefiberinternetbandalarga.net.br [170.82.79.181] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted
2023-02-20 08:36:46 H=170-82-79-181.thefiberinternetbandalarga.net.br [170.82.79.181] F=<wu ...
show more
2023-02-20 08:36:25 H=170-82-79-181.thefiberinternetbandalarga.net.br [170.82.79.181] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted
2023-02-20 08:36:46 H=170-82-79-181.thefiberinternetbandalarga.net.br [170.82.79.181] F=<[email protected]> rejected RCPT <[email protected]>: relay not permitted
...
show less
|
Email Spam
Hacking
|
