🇺🇸
TPI-Abuse
2026-05-30 23:48:28
(2 weeks ago)
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 19:48:21.415404 2026] [security2:error] [pid 18333:tid 18333] [client 181.174.164.221:25688] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||bodiehistory.com:443|F|4"] [data "CONNECT bodiehistory.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bodiehistory.com"] [uri "/"] [unique_id "aht3RQeqeCsubIiVJ5reXwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 04:32:42
(2 weeks ago)
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 00:32:35.881752 2026] [security2:error] [pid 29466:tid 29487] [client 181.174.164.221:55052] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||bullfrogspond.com:443|F|4"] [data "CONNECT bullfrogspond.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bullfrogspond.com"] [uri "/"] [unique_id "ahpoY1j8bvRodBLsjVJo2QAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(2 weeks ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇩🇪
Ivan Rezinkin
2026-05-25 12:21:23
(3 weeks ago)
DDoS attack against sub.cocooloco.ru (181.214.231.116) - L7 connection flood, observed sustained SYN ...
show more
DDoS attack against sub.cocooloco.ru (181.214.231.116) - L7 connection flood, observed sustained SYN traffic causing TCP listen-queue overflow. Auto-banned at 5/sec threshold via iptables hashlimit. Timestamp: 2026-05-25T12:21:02Z
show less
DDoS Attack
Email Spam
🇺🇸
TPI-Abuse
2026-05-11 18:13:03
(1 month ago)
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:217210) triggered by 181.174.164.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 14:12:57.096981 2026] [security2:error] [pid 1144:tid 1144] [client 181.174.164.221:32412] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||bodiehistory.com:443|F|4"] [data "CONNECT bodiehistory.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bodiehistory.com"] [uri "/"] [unique_id "agIcKWJPZAK2Nu9PbbGGPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-04-17 23:12:46
(1 month ago)
crowdsecurity/http-open-proxy
Hacking
🇮🇹
VHosting
2026-04-10 05:01:40
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇫🇮
Shaik Sai Meera
2025-10-31 12:25:16
(7 months ago)
IM360 WAF: Block Drupal/Joomla spammers
Brute-Force
Bad Web Bot
🇪🇸
10dencehispahard SL
2025-10-13 06:16:16
(8 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇩🇪
CommanderRoot
2025-08-26 19:02:55
(9 months ago)
Invalid HTTP request flood
DDoS Attack
Web Spam
2025-08-24 18:30:36
(9 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
2025-08-18 14:16:27
(9 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇳🇱
exxos
2025-08-08 19:45:35
(10 months ago)
HTTP1.x attacks
DDoS Attack
🇩🇪
CommanderRoot
2025-08-08 14:10:08
(10 months ago)
Invalid HTTP request flood
DDoS Attack
Web Spam
🇳🇱
exxos
2025-08-06 12:03:01
(10 months ago)
http-no-verb
Hacking