🇩🇪
LRob
2026-10-04 12:01:39
(18 hours ago)
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.name.asc&productListVi ...
show more
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.name.asc&productListView=list&q=Famille-Patron-Prorace-Genius | src_port: 46098
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 03:48:17
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 189.76.210.81 (ip-189-76-210-81.rev.wkve.net.br ...
show more
(mod_security) mod_security (id:210350) triggered by 189.76.210.81 (ip-189-76-210-81.rev.wkve.net.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:48:09.403025 2026] [security2:error] [pid 32193:tid 32267] [client 189.76.210.81:57712] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stridemechanics.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stridemechanics.com"] [uri "/"] [unique_id "arSded_9WU-96geH2uSYVgAAAA4"], referer: https://eaglervmoldingsa.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-09-10 15:33:07
(3 weeks ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show more
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-10T15:33:07Z.
show less
Bad Web Bot
🇻🇳
trung.fun
2026-08-18 13:35:24
(1 month ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-08-14 08:23:08
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-08-08 03:12:02
(1 month ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
🇺🇸
kosada.com
2026-08-04 12:13:03
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-05-22 04:09:21
(4 months ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2026-05-17 17:48:55
(4 months ago)
Port Scanner
Port Scan
🇺🇸
ShadowWhisperer
2026-05-16 00:18:20
(4 months ago)
TELNET credential attempt.
Brute-Force
IoT Targeted
2026-05-08 02:29:32
(4 months ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
🇮🇩
hermawan
2026-04-18 22:46:07
(5 months ago)
[Sun Apr 19 05:46:06.606958 2026] [security2:error] [pid 1360715:tid 140256847607488] [client 189.76 ...
show more
[Sun Apr 19 05:46:06.606958 2026] [security2:error] [pid 1360715:tid 140256847607488] [client 189.76.210.81:47388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.25.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "623"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/informasi-iklim/infografis-iklim/infografis-dasarian/infografis-dasarian-analisis-kejadian-hujan-lebat"] [unique_id "aeQJroJ9c34Z06IPo5cx7AAASQE"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1360718] [Nfit1ENnBAI] [aeQJroJ9c34Z06IPo5cx7AAASQE] keep_alive=[1] [2026-04-19 0
...
show less
Email Spam
Hacking
🇫🇷
polido
2026-04-12 05:30:54
(5 months ago)
Unauthorized connection attempt to port 443 from 189.76.210.81
Port Scan
🇺🇸
TPI-Abuse
2026-04-02 02:23:19
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 189.76.210.81 (189-76-210-81.rev.wkve.com.br): ...
show more
(mod_security) mod_security (id:210730) triggered by 189.76.210.81 (189-76-210-81.rev.wkve.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 22:23:11.696344 2026] [security2:error] [pid 32566:tid 32566] [client 189.76.210.81:33958] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.silvermoonherbals.com|F|2"] [data ".moongoth.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.silvermoonherbals.com"] [uri "/www.moongoth.com"] [unique_id "ac3TDwlcsP_1YDuxC2E8_AAAAAg"], referer: https://www.silvermoonherbals.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
hermawan
2026-03-24 02:38:51
(6 months ago)
1774319924.275083 Cs4g5Y3n8rpkT9ehxi 189.76.210.81 58118 103.166.156.58 443 tcp - 0.379089 0 0 SF F ...
show more
1774319924.275083 Cs4g5Y3n8rpkT9ehxi 189.76.210.81 58118 103.166.156.58 443 tcp - 0.379089 0 0 SF F F 0 ShAFaf 4 216 3 164 - 6 169004_49 852_64 65535_2-4-8-1-3_1412_6 43440_2-4-8-1-3_1460_14 03/24/2026-09:38:44.275083
...
show less
Email Spam
Hacking
