🇺🇸
TPI-Abuse
2026-11-07 22:58:21
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.230.206.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:58:14.026770 2026] [security2:error] [pid 21516:tid 21516] [client 45.230.206.152:37778] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.230.206.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:58:14.026770 2026] [security2:error] [pid 21516:tid 21516] [client 45.230.206.152:37778] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.iplayriichi.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.iplayriichi.com"] [uri "/"] [unique_id "au-tBuN2na4eEK_Xq-VqTwAAAAA"], referer: https://bplbpowes.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-04 08:18:56
UTC ·
(6 days ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-10-25 00:28:58
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.230.206.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:28:54.874084 2026] [security2:error] [pid 25279:tid 25279] [client 45.230.206.152:42906] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.230.206.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:28:54.874084 2026] [security2:error] [pid 25279:tid 25279] [client 45.230.206.152:42906] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "at1NRtsbza1C-0N1EFfsQwAAAAs"], referer: https://cbcfargo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Tsumugi Kotobuki
2026-10-15 15:31:29
UTC ·
(3 weeks ago)
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 40 | Len: 60B | Win: 65535(1) | F2B/ufw-honeypot@2026-10-15T15:31:28Z
Port Scan
Hacking
🇺🇸
thefuzz4
2026-10-11 06:16:38
UTC ·
(4 weeks ago)
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22, held 34 minute(s). Automated report.
Brute-Force
SSH
🇺🇸
NetVexor
2026-10-10 18:02:39
UTC ·
(1 month ago)
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan
Hacking
Brute-Force
2026-10-09 01:54:38
UTC ·
(1 month ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
2026-09-01 01:59:36
UTC ·
(2 months ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇨🇦
Anytech
2026-08-24 11:24:21
UTC ·
(2 months ago)
Blocked by Conn-Monitor: http-bad-user-agent
Web App Attack
Bad Web Bot
🇻🇳
trung.fun
2026-08-20 06:57:34
UTC ·
(2 months ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
🇫🇷
Zkillu
2026-08-19 21:57:55
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 34 pkts / 0.05 MB to UDP 80/8443 across 3 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. ...
show more
UDP flood (DDoS) vs AS215599: 34 pkts / 0.05 MB to UDP 80/8443 across 3 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
🇫🇷
HaloAgencySAS
2026-08-19 21:57:55
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 34 pkts / 0.05 MB to UDP 80/8443 across 3 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. ...
show more
UDP flood (DDoS) vs AS215599: 34 pkts / 0.05 MB to UDP 80/8443 across 3 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
2025-12-17 04:30:49
UTC ·
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-12-11 10:59:59
UTC ·
(10 months ago)
botnet
DDoS Attack
🇵🇹
rnl
2024-08-17 05:25:19
UTC ·
(2 years ago)
postfix (unknown user, SPF fail or relay access denied)
Brute-Force
