|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:12:40.568672 2026] [security2:error] [pid 22308:tid 22308] [client 185.107.56.80:17687] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.barbaraehill.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.barbaraehill.com"] [uri "/"] [unique_id "asQSyAeYggusW55-7YzUowAAABI"], referer: https://freebacklinkbuilder.space/dir/backlinks-for-traffic-18950
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
Maurice
|
|
Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP
Reported by: https://github. ...
show more
Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
|
Port Scan
|
|
|
🇺🇸
Cherryh4ck
|
|
Blocked by UFW [25565/tcp] | SPT: 56153 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/se ...
show more
Blocked by UFW [25565/tcp] | SPT: 56153 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
|
Port Scan
|
|
|
🇷🇺
russian-kurort.ru
|
|
SYN flood
|
DDoS Attack
Hacking
|
|
|
🇩🇪
EGP Abuse Dept
|
|
Scanning for web/db/file exploits on www.dejongwolvega.nl
|
SQL Injection
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
kosada.com
|
|
Web bot: denial-of-service flood
|
DDoS Attack
Bad Web Bot
|
|
|
🇨🇦
lakered
|
|
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Tech Evidence: JA4H: 9 ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Administration interface scan | Tech Evidence: JA4H: 9fe31705052f3ca322f55603a22e0827, Minimal-Browser-Profile, Lazy-Header-Accept, TLS-JA4-Spoofing-Detected (UA claims Browser but JA4 reports No-HTTP/2: t13d201200), JA4: t13d201200 | UA: Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/82.0.0.0 Safari/537.36
show less
|
Port Scan
Web App Attack
|
|
|
🇲🇹
Malta
|
|
185.107.56.80 - - [03/Jun/2026:21:58:34 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
185.107.56.80 - - [03/Jun/2026:21:58:34 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/83.0.0.0 Safari/537.36"
show less
|
Hacking
Web App Attack
|
|
|
🇧🇪
voormedia
|
|
Accessed trap at '/.env'
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 02:34:30.711893 2026] [security2:error] [pid 32602:tid 32602] [client 185.107.56.80:61355] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundaciondamashcc.org.ec"] [uri "/.env"] [unique_id "agF4do1V5C_7Zx5arOWWHwAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇹🇷
akarguard.net
|
|
Query flood attack on the bill payment page
|
Brute-Force
Bad Web Bot
Exploited Host
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 185.107.56.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 20 03:24:28.669282 2025] [security2:error] [pid 29339:tid 29339] [client 185.107.56.80:38610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-board.com"] [uri "/.env"] [unique_id "aUZdPGGRwOSZHBreb6s-XQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /xmlrpc.php
|
Web App Attack
|
|
|
🇧🇪
voormedia
|
|
Accessed trap at '/wp-login.php'
|
Web App Attack
|
|
|
Anonymous
|
|
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_CPANEL
|
Brute-Force
SSH
|
|