2026-06-11 10:07:00
(5 days ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇬🇧
consul.to
2026-06-02 09:57:28
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇮
NoaQT
2026-06-01 22:59:59
(2 weeks ago)
2026-06-01T22:59:58.906846+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54814 [01/Jun/2026:22:59:5 ...
show more
2026-06-01T22:59:58.906846+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54814 [01/Jun/2026:22:59:58.906] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 115/105/0/0/0 0/0 "GET /wp-config-sample.php HTTP/1.1"
2026-06-01T22:59:58.908378+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54812 [01/Jun/2026:22:59:58.907] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/103/0/0/0 0/0 "GET /wp-config.php.orig HTTP/1.1"
2026-06-01T22:59:58.909763+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54834 [01/Jun/2026:22:59:58.909] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 112/102/0/0/0 0/0 "GET /wp-config-backup.txt HTTP/1.1"
2026-06-01T22:59:58.910483+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54876 [01/Jun/2026:22:59:58.909] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 111/101/0/0/0 0/0 "GET /wp-config.inc HTTP/1.1"
2026-06-01T22:59:58.912905+00:00 ingress-1 haproxy[18251]: 43.239.192.179:54960 [01/Jun/2026:22:59:58.912] https_in~ https_in/<NOSRV>
...
show less
DDoS Attack
🇮🇩
Burayot
2026-06-01 08:41:15
(2 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 43.239.192.179 (IN/India/-): 1 in th ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 43.239.192.179 (IN/India/-): 1 in the last 3600 secs
show less
Web App Attack
🇳🇱
Mangelot Hosting
2026-05-30 22:00:36
(2 weeks ago)
(modsecurity) srv201 ModSecurity 43.239.192.179 (IN/India/-): 10 in the last 3600 secs; Ports: *; Di ...
show more
(modsecurity) srv201 ModSecurity 43.239.192.179 (IN/India/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇬🇧
consul.to
2026-05-30 21:01:30
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
ELYAZ
2026-05-30 11:06:36
(2 weeks ago)
(y3) Failed access -byebye- from 43.239.192.179 (IN/India/-): (CF_ENABLE)
Hacking
🇩🇪
Vegascosmetics
2026-05-29 21:50:29
(2 weeks ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 08:45:28
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 04:45:20.979592 2026] [security2:error] [pid 28032:tid 28032] [client 43.239.192.179:57420] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yakski.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yakski.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahlSICSedCHaP3mX0CxzlwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-05-29 08:38:56
(2 weeks ago)
Scanning for web/db/file exploits on unimogspecialist.com
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 08:18:17
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 04:18:11.524847 2026] [security2:error] [pid 20589:tid 20589] [client 43.239.192.179:38572] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rallentarecg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rallentarecg.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahlLwzfcF8xF7fulBGmJEgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-05-29 08:05:53
(2 weeks ago)
(y3) Failed access -byebye- from 43.239.192.179 (IN/India/-): (CF_ENABLE)
Hacking
🇫🇷
COMAITE
2026-05-29 08:00:18
(2 weeks ago)
SQL injection attempt from 43.239.192.179.
Web App Attack
🇫🇷
masterguru
2026-05-29 07:50:25
(2 weeks ago)
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint '1 ...
show more
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint '1&f(1' (942100-195)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-05-29 07:38:18
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.239.192.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 03:38:14.349577 2026] [security2:error] [pid 1857:tid 1857] [client 43.239.192.179:44100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frequencyrecordsllc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frequencyrecordsllc.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "ahlCZuEyTCmYQPoTeDQLmAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack