🇺🇸
TPI-Abuse
2026-11-14 10:35:19
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210730) triggered by 182.9.2.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:35:11.515856 2026] [security2:error] [pid 15580:tid 15580] [client 182.9.2.99:30024] ModSecu ...
show more
(mod_security) mod_security (id:210730) triggered by 182.9.2.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:35:11.515856 2026] [security2:error] [pid 15580:tid 15580] [client 182.9.2.99:30024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comics.flyingdodostudio.com|F|2"] [data ".egressstudiopress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comics.flyingdodostudio.com"] [uri "/thefirebreather/www.egressstudiopress.com"] [unique_id "avg5X1YBF4lD1uNLLEUo1wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 14:13:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 182.9.2.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 10:13:30.337925 2026] [security2:error] [pid 20787:tid 20787] [client 182.9.2.99:22849] ModSecu ...
show more
(mod_security) mod_security (id:225170) triggered by 182.9.2.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 10:13:30.337925 2026] [security2:error] [pid 20787:tid 20787] [client 182.9.2.99:22849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougrhodes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougrhodes.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atOCiuygaoeTFBEdXR2R6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 12:29:36
UTC ·
(4 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇮
abdubhai
2026-10-11 03:37:17
UTC ·
(1 month ago)
182.9.2.99 - - [11/Oct/2026:08:3
...
Brute-Force
🇫🇮
abdubhai
2026-10-11 03:15:51
UTC ·
(1 month ago)
182.9.2.99 - - [11/Oct/2026:08:1
...
Brute-Force
🇺🇸
鬼影233
2026-09-15 15:38:41
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇮🇩
David Koswari
2026-08-18 06:11:00
UTC ·
(2 months ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇺🇸
kosada.com
2026-07-27 10:26:15
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-05 09:01:46
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-06-17 20:45:06
UTC ·
(4 months ago)
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /brands/aruba-n ...
show more
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /brands/aruba-networks/shopby/manufacturer-audiocodes-optoma-lsi-aruba_networks-haivision-xyz.html?p=2 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇮🇩
hermawan
2026-06-12 13:51:22
UTC ·
(5 months ago)
[Fri Jun 12 20:51:19.018553 2026] [security2:error] [pid 56910:tid 140091908413120] [client 182.9.2.99:4160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/corer ...
show more
[Fri Jun 12 20:51:19.018553 2026] [security2:error] [pid 56910:tid 140091908413120] [client 182.9.2.99:4160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-klimat-story/555561581-mengenal-fenomena-la-nina-si-pembawa-hujan"] [unique_id "aiwO1_rneplWwI8g76XJOAAABwI"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[56914] [bydlxQ5ZeMY] [aiwO1_rneplWwI8g76XJOAAABwI] keep_alive=[1] [2026-0
...
show less
Email Spam
Hacking
🇮🇹
VHosting
2026-01-27 07:36:13
UTC ·
(9 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇺🇸
Axel
2025-09-13 01:53:10
UTC ·
(1 year ago)
[2025-09-13 01:53:10 UTC] Honeypot HTTP-Alt connection attempt | AXFRA HONEYPOT | ID: BUF-DU3J
Web App Attack
2025-09-12 13:55:45
UTC ·
(1 year ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
