๐บ๐ธ
TPI-Abuse
2026-10-25 00:54:32
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.a ...
show more
(mod_security) mod_security (id:210350) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:54:26.913243 2026] [security2:error] [pid 16437:tid 16437] [client 186.158.30.254:14267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||1writeforthegrant.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "1writeforthegrant.net"] [uri "/"] [unique_id "at1TQrr29y4BZPZ0Zom4dAAAAAo"], referer: https://addurl.in/redirect.php?ref_host=xn--2vq04cq9o89gwvrsgt.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-21 06:45:02
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Bad Web Bot
๐บ๐ธ
SiliSoftware
2026-09-20 01:38:41
(1 month ago)
/phpBB3/posting.php?mode=quote&f=7&p=3004&sid=994cf328b3f8f2610cc3e7870ac07105
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-14 20:31:48
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.a ...
show more
(mod_security) mod_security (id:210350) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 16:31:43.747575 2026] [security2:error] [pid 24148:tid 24148] [client 186.158.30.254:12508] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.versallis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.versallis.com"] [uri "/"] [unique_id "aqhZrxr29gIqrZudVtoN9gAAAA8"], referer: https://bye.fyi/report/59828
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-08-26 04:55:33
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
SX Communications
2026-08-21 06:57:34
(2 months ago)
HTTP application-layer DoS / botnet traffic from 186.158.30.254: repeated high-cost dynamic page and ...
show more
HTTP application-layer DoS / botnet traffic from 186.158.30.254: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
๐บ๐ธ
kosada.com
2026-08-16 07:11:00
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ซ๐ท
Little Iguana
2026-08-14 01:33:35
(2 months ago)
trying to access non-authorized port
Port Scan
๐บ๐ธ
MPL
2026-08-13 06:07:36
(2 months ago)
tcp ports: 22,23 (7 or more attempts)
Port Scan
๐บ๐ธ
cybsecaoccol
2026-08-13 01:01:29
(2 months ago)
unauthorized connection or malicious port scan attempted on tcp port 22 - dr
Port Scan
Hacking
๐จ๐ญ
backslash
2026-07-17 08:48:01
(3 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
๐บ๐ธ
kosada.com
2026-07-06 14:15:53
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-01-14 12:10:16
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.a ...
show more
(mod_security) mod_security (id:210730) triggered by 186.158.30.254 (host254.186-158-30.telmex.net.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 07:10:09.583314 2026] [security2:error] [pid 9507:tid 9507] [client 186.158.30.254:23511] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wadenelson.com|F|2"] [data ".fasturtle.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wadenelson.com"] [uri "/www.fasturtle.com"] [unique_id "aWeHoervM5NJcj3kGpE4xAAAABE"], referer: http://www.wadenelson.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
spamverify.com
2026-01-07 02:02:58
(9 months ago)
Honeypot Hit: Port Scan (23) TELNET
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
2025-12-31 09:56:05
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.31 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.31 is noted in report timestamp
show less
Hacking
Brute-Force