๐บ๐ธ
TPI-Abuse
2026-10-12 08:19:19
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:19:15.549717 2026] [security2:error] [pid 26529:tid 26529] [client 213.230.100.240:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.local639.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.local639.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asyYAyUF3cm7H_f5-2EZJQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-08 11:01:42
(5 days ago)
Port Scan Attack proto:TCP src:10116 dst:23
Port Scan
๐ฆ๐บ
dyln
2026-10-04 15:45:04
(1 week ago)
Dyls honeypot brute-force: Telnet (1 total hits)
Brute-Force
๐ฉ๐ช
Vegascosmetics
2026-10-04 05:48:24
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 70>=65, Abuse 70, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-03 08:59:20
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the las ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 04:59:16.334046 2026] [security2:error] [pid 11922:tid 11922] [client 213.230.100.240:20851] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arctic-sea.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arctic-sea.com"] [uri "/"] [unique_id "asDD5LWhxgWTQQ0JcOAteAAAABU"], referer: https://directorybacklinks.space/dir/niche-relevant-backlinks-12318
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-02 08:43:15
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 09:34:43
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the las ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 05:34:36.111122 2026] [security2:error] [pid 16759:tid 16759] [client 213.230.100.240:45486] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||laboquimia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "laboquimia.com"] [uri "/"] [unique_id "arzXrMNdmwvFOOR-gnLgEgAAAAA"], referer: https://aibacklinkcreator.store/dir/seo-link-building-services-117207
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 07:04:18
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the las ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:04:13.636570 2026] [security2:error] [pid 23972:tid 23972] [client 213.230.100.240:37720] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||timelord2067.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "timelord2067.com"] [uri "/"] [unique_id "ary0bYiHZAS5IomF5JJZPgAAAA0"], referer: https://onlinebacklinkgenerator.shop/dir/backlinks-for-ranking-213712
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Tsumugi Kotobuki
2026-09-29 09:11:48
(2 weeks ago)
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 6 ...
show more
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 53 | Len: 60B | Win: 65535(1) | rDNS: 240.64.uzpak.uz | F2B/ufw-honeypot@2026-09-29T09:11:48Z
show less
Port Scan
Hacking
๐ต๐ฑ
mkey
2026-09-28 18:50:03
(2 weeks ago)
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show more
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-09-28 20:44:14 | LAST=2026-09-28 20:44:15. Last seen 2026-09-28 20:44:15.
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-09-27 11:23:13
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the las ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.100.240 (240.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 07:23:10.591352 2026] [security2:error] [pid 874:tid 874] [client 213.230.100.240:14891] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||paragontechusa.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "paragontechusa.com"] [uri "/"] [unique_id "arj8niEGDxNj1S5JQlWf9gAAAAg"], referer: https://dppachecker.store/dir/premium-backlink-services-158214
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-09-24 16:04:23
(2 weeks ago)
Port Scan Attack proto:TCP src:4780 dst:23
Port Scan
๐บ๐ธ
RAP
2026-09-24 11:16:14
(2 weeks ago)
2026-09-24 11:16:14 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-24 06:29:27
(2 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
2026-09-23 04:43:04
(2 weeks ago)
38485/udp (1 or more attempts)
Port Scan
