🇺🇸
TPI-Abuse
2026-11-07 07:18:47
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:18:40.399246 2026] [security2:error] [pid 23644:tid 23708] [client 190.129.103.98:50586] ...
show more
(mod_security) mod_security (id:210350) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:18:40.399246 2026] [security2:error] [pid 23644:tid 23708] [client 190.129.103.98:50586] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||clearwaterpumpservices.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clearwaterpumpservices.com"] [uri "/"] [unique_id "au7Q0ERr8mouZoVznJp8ZQAAABI"], referer: https://islandboycamp.org/oregon-7s
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 04:58:22
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 23:58:18.445270 2026] [security2:error] [pid 32760:tid 32760] [client 190.129.103.98:53915] ...
show more
(mod_security) mod_security (id:210350) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 23:58:18.445270 2026] [security2:error] [pid 32760:tid 32760] [client 190.129.103.98:53915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kmindonesia.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kmindonesia.com"] [uri "/"] [unique_id "au6v6vcajzPaiGQTLc9HcgAAAAM"], referer: https://moverslittleelm.com/all/1630/25.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-10-01 05:50:37
UTC ·
(1 month ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇳🇱
soverin
2026-09-16 03:28:03
UTC ·
(1 month ago)
spam
Email Spam
🇺🇸
kosada.com
2026-08-26 10:46:27
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-08 04:37:51
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
soverin
2026-07-29 21:43:03
UTC ·
(3 months ago)
spam
Email Spam
🇩🇪
Jochen Pretli
2026-07-29 18:55:38
UTC ·
(3 months ago)
connection to honeypot
Email Spam
Port Scan
🇩🇰
powerhostingdk
2026-07-29 15:02:11
UTC ·
(3 months ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
🇫🇮
notelseit
2026-07-29 14:48:28
UTC ·
(3 months ago)
2026-07-29T16:47:19.981624+02:00 mail postfix/smtpd[1079113]: NOQUEUE: reject: RCPT from unknown[190.129.103.98]: 450 4.7.25 Client host rejected: cannot find your hostname, [190.129.103.98]; from=<[email protected] > to=<[email protected] ...
show more
2026-07-29T16:47:19.981624+02:00 mail postfix/smtpd[1079113]: NOQUEUE: reject: RCPT from unknown[190.129.103.98]: 450 4.7.25 Client host rejected: cannot find your hostname, [190.129.103.98]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[0.0.0.0]>
2026-07-29T16:47:20.202273+02:00 mail postfix/smtpd[1079113]: lost connection after RCPT from unknown[190.129.103.98]
2026-07-29T16:48:27.058877+02:00 mail postfix/smtpd[1079113]: NOQUEUE: reject: RCPT from unknown[190.129.103.98]: 450 4.7.25 Client host rejected: cannot find your hostname, [190.129.103.98]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[0.0.0.0]>
...
show less
Brute-Force
Email Spam
🇩🇪
Vegascosmetics
2026-07-11 22:48:22
UTC ·
(3 months ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
kosada.com
2026-06-29 18:02:52
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇬🇧
Oakley
2026-06-05 02:47:17
UTC ·
(5 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-05-20 20:35:58
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:35:50.689263 2026] [security2:error] [pid 30840:tid 30840] [client 190.129.103.98:52988] ...
show more
(mod_security) mod_security (id:210730) triggered by 190.129.103.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 16:35:50.689263 2026] [security2:error] [pid 30840:tid 30840] [client 190.129.103.98:52988] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bahamascruisersguide.com|F|2"] [data ".greatmysterious.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/Blogs-Websites/ www.greatmysterious.com"] [unique_id "ag4bJiaT-taUI4DIzFd-1AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
PeravixGroup
2026-05-12 14:58:14
UTC ·
(5 months ago)
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
IoT Targeted
Brute-Force
