🇫🇷
LRob
2026-10-12 08:33:43
(10 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT ...
show more
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Bad Web Bot
🇲🇽
octageeks.com
2026-10-12 04:12:17
(14 hours ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
masterguru
2026-10-11 12:56:07
(1 day ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 213.230.78.245 (UZ/Uzbekistan/245.64.uzpak.uz ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 213.230.78.245 (UZ/Uzbekistan/245.64.uzpak.uz): 1 in the last 3600 secs (0-195)
show less
Hacking
🇧🇷
aosafeshield
2026-10-09 17:25:15
(3 days ago)
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
Port Scan
Hacking
🇫🇷
sthoyer.de
2026-10-04 20:13:33
(1 week ago)
Oct 4 22:13:32 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 4 22:13:32 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=213.230.78.245 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=8990 DF PROTO=TCP SPT=36826 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
sthoyer.de
2026-10-04 08:57:37
(1 week ago)
Oct 4 10:57:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 4 10:57:37 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=213.230.78.245 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=4482 DF PROTO=TCP SPT=50051 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇫🇷
Little Iguana
2026-10-04 08:56:32
(1 week ago)
trying to access non-authorized port
Port Scan
🇫🇷
sthoyer.de
2026-10-04 04:32:45
(1 week ago)
Oct 4 06:32:44 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ...
show more
Oct 4 06:32:44 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=213.230.78.245 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=6751 DF PROTO=TCP SPT=2950 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-03 12:55:42
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 08:55:38.118006 2026] [security2:error] [pid 22952:tid 23024] [client 213.230.78.245:35239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||velatorioslucenses.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "velatorioslucenses.com"] [uri "/"] [unique_id "asD7Suoj51LmLNQFCcn23wAAAQw"], referer: https://websitebacklinkmaker.shop/dir/link-outreach-services-224589
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 01:40:42
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 21:40:38.642562 2026] [security2:error] [pid 16775:tid 16792] [client 213.230.78.245:21619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||strengthsmatter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strengthsmatter.com"] [uri "/"] [unique_id "ar8LltwQlz_M9XCWakDnoAAAAA8"], referer: https://makebacklinksfree.website/dir/manual-link-building-services-199190
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-01 18:56:43
(1 week ago)
Shop search flood (L7 DDoS) | path: /40-meilleur-velo-electrique-entre-4000-et-5000-euros | query: o ...
show more
Shop search flood (L7 DDoS) | path: /40-meilleur-velo-electrique-entre-4000-et-5000-euros | query: order=product.reference.asc&q=Type+de+cadre-Droit | src_port: 45202
show less
DDoS Attack
Web App Attack
2026-10-01 11:24:12
(1 week ago)
Unauthorized connection to SSH port 22
Port Scan
SSH
🇫🇷
security.rdmc.fr
2026-09-29 16:57:06
(1 week ago)
Port Scan Attack proto:TCP src:3157 dst:23
Port Scan
🇺🇸
TPI-Abuse
2026-09-28 20:37:39
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:37:33.150649 2026] [security2:error] [pid 23388:tid 23388] [client 213.230.78.245:28828] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||christineaholtz.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "christineaholtz.com"] [uri "/"] [unique_id "arrQDRxqfT4wJP9a4gW4jQAAAAY"], referer: https://patvivod.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 21:43:50
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last ...
show more
(mod_security) mod_security (id:210350) triggered by 213.230.78.245 (245.64.uzpak.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:43:42.255447 2026] [security2:error] [pid 9084:tid 9084] [client 213.230.78.245:37876] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||holgerfeld.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "holgerfeld.com"] [uri "/"] [unique_id "arbrDp-9kriWiSbAtlAJuAAAABY"], referer: https://websitelinkschecker.space/dir/backlinks-for-business-93744
show less
Brute-Force
Bad Web Bot
Web App Attack
