🇺🇸
TPI-Abuse
2026-11-13 14:02:02
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 179.6.55.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:01:57.769864 2026] [security2:error] [pid 5286:tid 5300] [client 179.6.55.162:5743] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 179.6.55.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:01:57.769864 2026] [security2:error] [pid 5286:tid 5300] [client 179.6.55.162:5743] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aafm.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafm.org"] [uri "/"] [unique_id "avcYVefrsv9_MNLO-X_3lwAAAYg"], referer: https://sitelike.org/similar/cwmindia.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-11-13 06:10:17
UTC ·
(2 days ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-26 16:54:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 179.6.55.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:54:02.747662 2026] [security2:error] [pid 21183:tid 21183] [client 179.6.55.162:1325] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 179.6.55.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:54:02.747662 2026] [security2:error] [pid 21183:tid 21183] [client 179.6.55.162:1325] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chrischamberlain.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chrischamberlain.com"] [uri "/"] [unique_id "at-FqljH8gctrOoZY6B9jQAAAAA"], referer: https://acquire.co.in/redirect.php?ref_host=anandrajs.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-24 10:26:33
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-23T23:16:11.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-23 06:20:31
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T11:36:36.000Z.
Web App Attack
🇺🇸
鬼影233
2026-10-01 12:12:39
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 05:10:22
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
2026-09-12 06:15:32
UTC ·
(2 months ago)
Large-scale coordinated botnet (5M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies G ...
show more
Large-scale coordinated botnet (5M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim|LIS|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group | Catalog Search Abuse Blocked: /catalogsearch/result/?dir=desc&order=relevance+&product_vc_type=99%2C101&q=Bosch+FCS | UA: Mozilla/5.0 (X11; Linux i686) AppleWebKit/531.1 (KHTML, like Gecko) Chrome/16.0.818.0 Safari/531.1 | (Magento Site)
show less
Hacking
Bad Web Bot
🇳🇱
ATV
2022-12-02 19:01:00
UTC ·
(3 years ago)
Mail server abuse attemps: mail detected as spam
Email Spam
🇩🇪
MarkGGN
2022-11-15 16:13:34
UTC ·
(4 years ago)
SMTP Bruteforce. Nov 15 22:13:24 * postfix/smtpd[1639614]: NOQUEUE: reject: RCPT from unknown[179.6.55.162]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [179.6.55.162]; from=<therapiesf3@*> to=<therapiesf3@*> proto=ESMTP helo=< ...
show more
SMTP Bruteforce. Nov 15 22:13:24 * postfix/smtpd[1639614]: NOQUEUE: reject: RCPT from unknown[179.6.55.162]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [179.6.55.162]; from=<therapiesf3@*> to=<therapiesf3@*> proto=ESMTP helo=<[179.6.55.162]>
Nov 15 22:13:34 * postfix/smtpd[1639614]: NOQUEUE: reject: RCPT from unknown[179.6.55.162]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [179.6.55.162]; from=<therapiesf3@*> to=<therapiesf3@*> proto=ESMTP helo=<[179.6.55.162]>
show less
Brute-Force
🇬🇧
Joe-Mark
2022-10-15 19:15:40
UTC ·
(4 years ago)
TCP Port: 25 invalid blocked Listed on dnsbl-sorbs (6)
Email Spam
🇩🇪
evilazrael.de
2022-10-12 19:44:53
UTC ·
(4 years ago)
Mail sent to address hacked/leaked from Destructoid
Email Spam
🇸🇬
Sean64
2022-08-30 15:57:31
UTC ·
(4 years ago)
Email Spam
Brute-Force
2022-07-27 23:45:34
UTC ·
(4 years ago)
Jul 28 05:45:34 ns3104219 postfix/smtpd[15876]: NOQUEUE: reject: RCPT from unknown[179.6.55.162]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [179.6.55.162]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo= ...
show more
Jul 28 05:45:34 ns3104219 postfix/smtpd[15876]: NOQUEUE: reject: RCPT from unknown[179.6.55.162]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [179.6.55.162]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[179.6.55.162]>
...
show less
Email Spam
Web App Attack
🇫🇷
geot
2022-01-21 09:37:53
UTC ·
(4 years ago)
Spoofed mail
Spoofing
