🇺🇸
TPI-Abuse
2026-11-07 00:21:57
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 190.122.223.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:21:51.945245 2026] [security2:error] [pid 9075:tid 9075] [client 190.122.223.44:57766] M ...
show more
(mod_security) mod_security (id:210350) triggered by 190.122.223.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:21:51.945245 2026] [security2:error] [pid 9075:tid 9075] [client 190.122.223.44:57766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sabri.es|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sabri.es"] [uri "/"] [unique_id "au5vH7CLOU5I7aAKblIDewAAAAw"], referer: https://sukartoen.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 02:52:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 190.122.223.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:52:05.403419 2026] [security2:error] [pid 10970:tid 10970] [client 190.122.223.44:38270] ...
show more
(mod_security) mod_security (id:210350) triggered by 190.122.223.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 22:52:05.403419 2026] [security2:error] [pid 10970:tid 10970] [client 190.122.223.44:38270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tudor-harris.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tudor-harris.com"] [uri "/"] [unique_id "auVX1QEggoJYyWS9_rhB_AAAABQ"], referer: https://tudor-harris.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-02 01:22:48
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
2026-09-21 03:31:31
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇫🇷
Zkillu
2026-08-19 22:29:29
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evi ...
show more
UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
🇫🇷
HaloAgencySAS
2026-08-19 22:29:29
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evi ...
show more
UDP flood (DDoS) vs AS215599: 6 pkts / 0.01 MB to UDP 8443 across 4 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
🇺🇸
LotPhantom
2026-08-18 01:30:45
UTC ·
(2 months ago)
2026-08-18T01:30:45.243867+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=190.122.223.44 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=41912 DF PROTO=TCP SPT=25176 DPT=23 WINDOW=65535 RE ...
show more
2026-08-18T01:30:45.243867+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=190.122.223.44 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=41912 DF PROTO=TCP SPT=25176 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
2026-08-18T01:30:45.244212+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=190.122.223.44 DST=157.230.217.55 LEN=60 TOS=0x08 PREC=0x20 TTL=47 ID=58429 DF PROTO=TCP SPT=44636 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
2026-08-09 02:56:19
UTC ·
(2 months ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇫🇷
Tilellit.PRO
2026-07-14 08:19:47
UTC ·
(3 months ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇫🇷
Tilellit.PRO
2026-07-09 12:50:26
UTC ·
(3 months ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
2026-06-06 14:30:54
UTC ·
(5 months ago)
Web App Attack, Hacking
Hacking
Web App Attack
