2026-10-22 11:32:25
(6 days ago)
apache vulnerability scan
Web App Attack
๐จ๐ญ
ALPHANET
2026-10-06 11:59:08
(3 weeks ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-09-28 20:36:34
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 179.6.28.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:36:29.452970 2026] [security2:error] [pid 9981:tid 9981] [client 179.6.28.134:24089] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 179.6.28.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:36:29.452970 2026] [security2:error] [pid 9981:tid 9981] [client 179.6.28.134:24089] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jamisongreen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamisongreen.com"] [uri "/"] [unique_id "arrPzUWdjLXyGGRmTUm79QAAAAM"], referer: https://genderdivercity.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 04:11:47
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 179.6.28.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:11:30.679596 2026] [security2:error] [pid 9832:tid 9832] [client 179.6.28.134:9461] ModSec ...
show more
(mod_security) mod_security (id:210730) triggered by 179.6.28.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 00:11:30.679596 2026] [security2:error] [pid 9832:tid 9832] [client 179.6.28.134:9461] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ufcmusic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ufcmusic.com"] [uri "/production/drupal.sql"] [unique_id "aq4LcuDQQzNb6YRQWN23DAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-19 03:09:06
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.top | URI: /wp-admin | UA: Mozilla/5.0 (Windows NT 10.0 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.top | URI: /wp-admin | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-17 17:01:10
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
2026-09-06 11:36:44
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-26 16:52:55
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-08-24 18:34:50
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
๐ณ๐ฑ
EGP Abuse Dept
2026-07-20 03:39:19
(3 months ago)
Scanning for port/service exploits on tpc-005.mach3builders.nl
Port Scan
Hacking
๐ญ๐บ
ksol-hostmaster
2025-10-19 21:22:09
(1 year ago)
Massive botnet baited into scraping tarpit
Bad Web Bot
๐ฌ๐ง
Bytemark
2022-10-20 18:50:45
(4 years ago)
Oct 20 23:50:45 dlcentre3 postfix/smtpd[27416]: NOQUEUE: reject: RCPT from unknown[179.6.28.134]: 554 5.7.1 Service unavailable; Client host [179.6.28.134] blocked using cbl.abuseat.org; https://www.spamhaus.org/query/ip/179.6.28.134; from=<k.hayday@ ...
show more
Oct 20 23:50:45 dlcentre3 postfix/smtpd[27416]: NOQUEUE: reject: RCPT from unknown[179.6.28.134]: 554 5.7.1 Service unavailable; Client host [179.6.28.134] blocked using cbl.abuseat.org; https://www.spamhaus.org/query/ip/179.6.28.134; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[179.6.28.134]>
show less
Email Spam
Spoofing
Brute-Force
Exploited Host
๐ฉ๐ช
vereinshosting
2022-10-10 12:31:51
(4 years ago)
SPAM email (score: 34.7)
Email Spam
๐ธ๐ฌ
Sean64
2022-08-28 17:03:13
(4 years ago)
Email Spam
Brute-Force
๐บ๐ธ
vestibtech
2022-07-28 07:29:13
(4 years ago)
Jul 28 05:29:13 Host-KLAX-C amavis[3103915]: (3103915-09) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [179.6.28.134] [179.6.28.134] <[email protected] > -> <[email protected] >, Queue-ID: 58ADE1C08B1, Message-ID: <901543340.20220728002 ...
show more
Jul 28 05:29:13 Host-KLAX-C amavis[3103915]: (3103915-09) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [179.6.28.134] [179.6.28.134] <[email protected] > -> <[email protected] >, Queue-ID: 58ADE1C08B1, Message-ID: <[email protected] >, mail_id: VfPfBXdUDiGt, Hits: 26.122, size: 8086, 4497 ms
...
show less
Email Spam
