🇺🇸
TPI-Abuse
2026-09-14 12:24:41
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 179.48.139.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 179.48.139.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 08:24:34.221555 2026] [security2:error] [pid 2708:tid 2708] [client 179.48.139.124:17043] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ralphharris.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ralphharris.org"] [uri "/life-happens-on-the-playground"] [unique_id "aqfngqWzdyD36k8JpFvQVAAAADQ"], referer: https://lifecourseministries.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-06-24 04:32:14
(2 months ago)
Scanning for port/service exploits on tpc-027.mach3builders.nl
Port Scan
Hacking
🇩🇪
Vegascosmetics
2026-06-21 16:06:06
(2 months ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
2026-02-18 23:17:57
(6 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇨🇭
backslash
2025-12-03 14:35:08
(9 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
2025-11-25 14:08:50
(9 months ago)
scanning http requests from known botnet
Web App Attack
🇮🇩
hermawan
2025-11-02 19:06:28
(10 months ago)
[Mon Nov 03 02:06:27.562165 2025] [security2:error] [pid 1077928:tid 140527480497856] [client 179.48 ...
show more
[Mon Nov 03 02:06:27.562165 2025] [security2:error] [pid 1077928:tid 140527480497856] [client 179.48.139.124:36118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.19.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "231"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.54 Safari/537.36 request_line = GET /index.php/profil/meteorologi/list-all-categories/4178-klimatologi/infografis/infografis-klimatologi/infografis-bulanan/infografis-bulanan-iklim-ekstrim/infografis-bulanan-iklim-ekstrim-tahun-2023/555560286-infografis-bulanan-iklim-ekstrim-bulan-juli-tahun-2023-di-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-all-categories/4178-klimatologi
...
show less
Hacking
Web App Attack
2025-10-29 12:15:51
(10 months ago)
Observed performing botnet scanning activities.
Brute-Force
Bad Web Bot
🇪🇸
Global Cyber Police
2025-07-28 02:59:26
(1 year ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-31 13:14:47
(1 year ago)
(mod_security) mod_security (id:217210) triggered by 179.48.139.124 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:217210) triggered by 179.48.139.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 31 09:14:41.958326 2025] [security2:error] [pid 1493957:tid 1493957] [client 179.48.139.124:4686] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.gamepart.com|F|4"] [data "GET http://www.gamepart.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gamepart.com"] [uri "/"] [unique_id "aDsAwfzV1Y2n71lYWN0C8wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack