๐บ๐ธ
TPI-Abuse
2026-10-05 21:14:39
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:14:36.026599 2026] [security2:error] [pid 12869:tid 12869] [client 192.140.21.91:48551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||windtime.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "windtime.com"] [uri "/"] [unique_id "asQTPHKNpNCGvM_MMcrwgQAAACU"], referer: https://generatebacklink.space/dir/competitive-seo-backlinks-232779
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 21:57:42
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:57:37.498245 2026] [security2:error] [pid 9232:tid 9232] [client 192.140.21.91:44413] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebrateadoption.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebrateadoption.com"] [uri "/"] [unique_id "arri0XYLIGfU2YwGeqx0qwAAAAE"], referer: https://journey-to-caitlin.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-23 11:53:57
(2 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-22 03:34:53
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 192.140.21.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:34:49.006277 2026] [security2:error] [pid 25543:tid 25543] [client 192.140.21.91:63426] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||deborahbein.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "deborahbein.com"] [uri "/a-little-about-me-and-my-blog/"] [unique_id "arH3Wfq27gEqJ0ZiyP0JcAAAAC8"], referer: https://dianewrightquilts.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-25 21:59:11
(2 months ago)
denied traffic to a honeypot network. destination port 53908.
Port Scan
Hacking
2026-07-02 22:33:54
(3 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
๐บ๐ธ
kosada.com
2026-06-29 10:28:41
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐จ๐ญ
backslash
2026-03-28 07:24:08
(6 months ago)
Bad Web Bot
๐ฎ๐น
A000Z
2026-03-19 10:54:51
(6 months ago)
Fail2Ban: 192.140.21.91 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show more
Fail2Ban: 192.140.21.91 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ฎ๐ฉ
hermawan
2026-01-03 22:32:50
(9 months ago)
[Sun Jan 04 05:32:49.731784 2026] [security2:error] [pid 533264:tid 140533417543360] [client 192.140 ...
show more
[Sun Jan 04 05:32:49.731784 2026] [security2:error] [pid 533264:tid 140533417543360] [client 192.140.21.91:23741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "image/heif" at REQUEST_HEADERS:Accept. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "425"] [id "440009"] [msg " Image Heif"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: text/html found within REQUEST_HEADERS:Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 request_line = GET / HTTP/2.0 Request URI RAW = / Request Basename = "] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "aVmZEZVriQ5HrQmtIPPLaAAAQxg"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[533290] [zxvTZ4OVQKs] [aVmZEZVriQ5HrQmtIPPLaAAAQxg] keep_alive=[1] [2026-01-04 05:32:49.731791] [R:aVmZEZVriQ5HrQmt
...
show less
Hacking
Web App Attack
2025-11-18 05:43:33
(10 months ago)
scanning http requests from known botnet
Web App Attack
๐ซ๐ท
Sklurk
2025-08-13 03:22:25
(1 year ago)
Web App Attack
Web App Attack
๐ณ๐ฑ
exxos
2025-07-30 01:08:27
(1 year ago)
http-no-verb
Hacking
๐ณ๐ฑ
exxos
2025-07-28 04:28:02
(1 year ago)
http-no-verb
Hacking
๐ณ๐ฑ
exxos
2025-07-28 02:26:04
(1 year ago)
http-no-verb
Hacking
