🇫🇷
Entalpi.net
2026-06-25 10:42:29
(1 hour ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
2026-06-25 09:28:42
(2 hours ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 6800. Types: Client Management(11), GEO IP(11). Ori ...
show more
FortiWeb WAF: 22 attacks detected. Threat Score: 6800. Types: Client Management(11), GEO IP(11). Origin: Singapore.
show less
Web App Attack
🇹🇷
ferique
2026-06-25 08:46:14
(3 hours ago)
Real-time Intercept: DNN_AUTH attack. Reference: 2026-06-25 11:46:08.4864 Login failure: 43.134.38. ...
show more
Real-time Intercept: DNN_AUTH attack. Reference: 2026-06-25 11:46:08.4864 Login failure: 43.134.38.171 DNN_AUTH
show less
Web App Attack
Bad Web Bot
🇺🇸
donarev419
2026-06-25 02:16:18
(9 hours ago)
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:80
Use ...
show more
Connection to port 80 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:80
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like
show less
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-06-25 00:39:26
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 20:39:22.661772 2026] [security2:error] [pid 18066:tid 18066] [client 43.134.38.171:57082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bernsteinip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bernsteinip.com"] [uri "/"] [unique_id "ajx4ujZah0zmfqZ7VZ9pzQAAACA"], referer: http://intellectualproperty.nyc
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 22:39:12
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:39:08.398106 2026] [security2:error] [pid 5415:tid 5415] [client 43.134.38.171:51472] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.garciadomingo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.garciadomingo.com"] [uri "/"] [unique_id "ajxcjEwtmeEAEwjxO1h41AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 21:42:33
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.38.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 17:42:27.263978 2026] [security2:error] [pid 16984:tid 17006] [client 43.134.38.171:36042] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.kcscomputer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kcscomputer.com"] [uri "/"] [unique_id "ajxPQwBV2ksoahiaMcHWUwAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xxkodedxx
2026-06-24 16:26:38
(19 hours ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: SG / AS132203 Shenzhen Tencent Computer Systems Company Limited
Active: 16:25:55 UTC
Volume: 1 HTTP req
Probed: /
Status mix: 444×1
Vhost fishing: 67.217.240.72
UA: "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-06-24 15:01:10
(20 hours ago)
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 132203 (Tencent Building, Kejizhongyi Ave ...
show more
Triggered Cloudflare WAF from SG.
Action taken: BLOCK
ASN: 132203 (Tencent Building, Kejizhongyi Avenue)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-06-24T12:41:47Z
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Bad Web Bot
🇩🇪
barbarella
2026-06-24 14:23:01
(21 hours ago)
Illegal http header (GET /)
Hacking
Web App Attack
2026-06-24 12:29:02
(23 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-06-24 10:40:47
(1 day ago)
Try to access /xmlrpc.php
Web App Attack
🇬🇧
Interceptor_HQ
2026-06-23 14:21:39
(1 day ago)
request_uri: / -- automatic report --
Brute-Force
Hacking
🇺🇸
johnkarlhill
2026-06-23 11:30:04
(2 days ago)
WebKnight blocked malicious web request on johnkarlhill.com
Brute-Force
SSH
🇩🇪
sdos.es
2026-06-23 11:15:44
(2 days ago)
"Multiple/Conflicting Connection Header Data Found - keep-alive, close"
Web App Attack