🇺🇸
TPI-Abuse
2026-11-10 13:17:32
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:17:24.909945 2026] [security2:error] [pid 18345:tid 18345] [client 84.54.73.97 ...
show more
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:17:24.909945 2026] [security2:error] [pid 18345:tid 18345] [client 84.54.73.97:22197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agingworkforcenews.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agingworkforcenews.com"] [uri "/"] [unique_id "avMZZH1fihBz11WX3lZz6AAAAAA"], referer: https://internetwondering.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:59:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:58:59.411710 2026] [security2:error] [pid 3773:tid 3773] [client 84.54.73.97:2 ...
show more
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:58:59.411710 2026] [security2:error] [pid 3773:tid 3773] [client 84.54.73.97:28410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||assec.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "assec.org"] [uri "/keynotes.html"] [unique_id "auN7U15Q16hzQkqdq_hPuAAAABg"], referer: https://assec.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:08:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:08:54.996261 2026] [security2:error] [pid 22735:tid 22735] [client 84.54.73.97 ...
show more
(mod_security) mod_security (id:210350) triggered by 84.54.73.97 (97.73.intal.uz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:08:54.996261 2026] [security2:error] [pid 22735:tid 22735] [client 84.54.73.97:50562] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.circulodesonido.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circulodesonido.org"] [uri "/"] [unique_id "atvM5qxPWrdidkLLlWbDVQAAAAU"], referer: https://13cielos.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TheMadBeaker
2024-10-22 00:39:42
UTC ·
(2 years ago)
Fail2Ban Ban Triggered
SMTP Bruteforce Attempt
Email Spam
Brute-Force
2024-09-14 07:24:52
UTC ·
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2024-08-13 12:45:22
UTC ·
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2024-08-01 16:49:05
UTC ·
(2 years ago)
SPAM EMAIL 84.54.73.97 (97.73.intal.uz)
Email Spam
🇭🇺
Lacika555
2024-08-01 12:57:25
UTC ·
(2 years ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇧🇷
diego
2024-06-16 13:11:57
UTC ·
(2 years ago)
Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds
DDoS Attack
🇺🇸
cybsecaoccol
2024-06-04 07:47:45
UTC ·
(2 years ago)
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
🇵🇱
nfsec.pl
2024-05-31 10:55:36
UTC ·
(2 years ago)
Scanning on port: 139
Port Scan
2024-05-29 11:19:26
UTC ·
(2 years ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇬🇧
Joe-Mark
2024-03-28 09:13:16
UTC ·
(2 years ago)
spamassassin . (I RECORDED YOU!) . ([email protected] ) . AK PHOTO 2[2.0] . RCVD IN SBL CSS[3.3] . RCVD IN PBL[3.3] . RCVD IN AMI BLACK[9.0] . RCVD IN AMI EXPLOIT[9.0] . RCVD IN AMI DYN[9.0] . RCVD IN ANONMAILS[3.0] . SEM URIRED[2.0] . BL 3 POLS ...
show more
spamassassin . (I RECORDED YOU!) . ([email protected] ) . AK PHOTO 2[2.0] . RCVD IN SBL CSS[3.3] . RCVD IN PBL[3.3] . RCVD IN AMI BLACK[9.0] . RCVD IN AMI EXPLOIT[9.0] . RCVD IN AMI DYN[9.0] . RCVD IN ANONMAILS[3.0] . SEM URIRED[2.0] . BL 3 POLSPAM PL[2.9] . BL 2 POLSPAM PL[3.9] . URIBL SEM[2.0] . AK VIRUS RAT 1[3.0] . RCVD IN GBUDB[5.0] . RCVD IN HOSTKARMA BL[2.5] . RCVD IN VALIDITY RPBL[1.3] . RCVD IN SPAMRATS DYNA[3.0] . SPF NOT PASS[1.1] . KAM CRIM[8.5] . KAM LAZY DOMAIN SECURITY[1.0] . BITCOIN EXTORT 01[4.5] . GB BITCOIN CP[1.9] . BITCOIN SPAM 07[1.2] . LOCAL FROM JL[8.1]
show less
Email Spam
2024-01-31 21:30:11
UTC ·
(2 years ago)
Excessive HTTP/HTTPS connections.
Bad Web Bot
🇺🇸
ISPLtd
2024-01-16 05:53:31
UTC ·
(2 years ago)
Jan 16 01:53:21 SRC=84.54.73.97 PROTO=TCP SPT=37263 DPT=445 SYN
Jan 16 01:53:24 SRC=84.54.73.97 PROTO=TCP SPT=37263 DPT=445 SYN
Jan 16 01:53:30 SRC=84.54.73.97 PROTO=TCP SPT=37263 DPT=445 SYN
...
Port Scan
