🇩🇪
Packets-Decreaser.NET
2026-10-05 21:24:21
(15 hours ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇿
lp
2026-09-30 19:52:40
(5 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 186.82.87.41
2026-09-30T21:29:18+02:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 186.82.87.41
2026-09-30T21:29:18+02:00 vpn Access-Reject 'xmolb00' station: 186.82.87.41 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 00:08:27
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 186.82.87.41 (dynamic-ip-186828741.cable.net.co ...
show more
(mod_security) mod_security (id:210350) triggered by 186.82.87.41 (dynamic-ip-186828741.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:08:20.931551 2026] [security2:error] [pid 4994:tid 4994] [client 186.82.87.41:1329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexetjeremy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexetjeremy.com"] [uri "/"] [unique_id "arxS9F0BP2EfQTLnii3l3wAAAAo"], referer: https://team-plastique.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-25 03:16:23
(1 week ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
🇷🇸
Scan
2026-09-24 00:40:18
(1 week ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
NetVexor
2026-09-24 00:21:53
(1 week ago)
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-09-23 20:39:40
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 186.82.87.41 (dynamic-ip-186828741.cable.net.co ...
show more
(mod_security) mod_security (id:210350) triggered by 186.82.87.41 (dynamic-ip-186828741.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 16:39:32.019707 2026] [security2:error] [pid 31265:tid 31306] [client 186.82.87.41:5423] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kyrameadows.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kyrameadows.com"] [uri "/"] [unique_id "arQ5BAbPZnet3t_e0es77AAAAMI"], referer: https://pacheckertool.site/dir/competitive-seo-backlinks-116979
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
CK_beats
2026-09-23 19:25:04
(1 week ago)
Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 3 hits, proto=tcp, ports=22
Port Scan
Hacking
🇵🇱
ToJa
2026-09-23 14:16:11
(1 week ago)
SSH (tcp/22) Honeypot Trap:
Sep 23 16:16:08 server1 sshd-session[773345]: Connection closed by 186.8 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 23 16:16:08 server1 sshd-session[773345]: Connection closed by 186.82.87.41 port 8278
show less
Port Scan
SSH
🇺🇸
kosada.com
2026-08-27 02:25:14
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-07-03 09:45:55
(3 months ago)
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ...
show more
Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /brands/rcf/shopby/manufacturer-rcf-lsi-f5_networks-projectiondesign-xyz.html?stock=1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 | (Magento Site)
show less
Hacking
Bad Web Bot
🇺🇸
MPL
2026-01-21 17:58:48
(8 months ago)
tcp/23
Port Scan
🇺🇸
MPL
2026-01-21 17:58:48
(8 months ago)
tcp/23 (2 or more attempts)
Port Scan
2026-01-21 05:52:21
(8 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2026-01-21 00:21:49
(8 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
