🇫🇷
Murazaki
2026-10-20 18:24:43
(2 days ago)
82.66.93.214 95.71.150.16 - - [20/Oct/2026:20:24:42 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 50 ...
show more
82.66.93.214 95.71.150.16 - - [20/Oct/2026:20:24:42 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 503 190 "-" "-" "-"
...
show less
Hacking
🇳🇱
JCB
2026-10-20 17:11:00
(2 days ago)
[Mon Oct 19 19:20:46 2026] [error] [client 95.71.150.16:48074] AH00135: Invalid method in request GE ...
show more
[Mon Oct 19 19:20:46 2026] [error] [client 95.71.150.16:48074] AH00135: Invalid method in request GETFIRMVER /favicon.ico/ HTTP/1.1
show less
Web App Attack
Hacking
🇷🇴
abuse_IP_reporter
2026-10-20 16:45:23
(2 days ago)
Oct 20 19:28:32 server UFW BLOCK SRC=95.71.150.16 PROTO=TCP SPT=53593 DPT=443
Port Scan
🇨🇿
Countryman
2026-10-20 16:39:04
(2 days ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇺🇸
jhuisi
2026-10-20 15:57:45
(2 days ago)
Mod Security Hit
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 14:58:44
(2 days ago)
(mod_security) mod_security (id:217210) triggered by 95.71.150.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 95.71.150.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:58:39.825726 2026] [security2:error] [pid 8542:tid 8542] [client 95.71.150.16:46728] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||192.64.150.19|F|4"] [data "GETROUTERINFO /favicon.ico/ HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.19"] [uri "/favicon.ico/"] [unique_id "ateBn7Ul7KbZs-OWPaXMNgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-20 14:33:11
(2 days ago)
crawler behavior: HTTP GET on a non-existent endpoint
Web App Attack
2026-10-20 14:30:41
(2 days ago)
Drop from IP address 95.71.150.16 to tcp-port 443
Port Scan
🇧🇷
radardatelecom
2026-10-20 14:18:03
(2 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇱🇹
Selckie
2026-10-20 14:02:17
(2 days ago)
fail2ban: NGINX unusual impact
Web App Attack
🇫🇷
sbocquet
2026-10-20 14:02:03
(2 days ago)
Port 443 scanned from 95.71.150.16:44826.
Port Scan
2026-10-20 13:53:00
(2 days ago)
95.71.150.16 - - [20/Oct/2026:15:52:59 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 403 5759 "-" "- ...
show more
95.71.150.16 - - [20/Oct/2026:15:52:59 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 403 5759 "-" "-" ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 12:57:46
(2 days ago)
(mod_security) mod_security (id:217210) triggered by 95.71.150.16 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 95.71.150.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:57:39.335331 2026] [security2:error] [pid 15755:tid 15755] [client 95.71.150.16:58690] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||192.64.150.244|F|4"] [data "GETROUTERINFO /favicon.ico/ HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.244"] [uri "/favicon.ico/"] [unique_id "atdlQ8a7qEPq4EbCJXvNwAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Kolobrzeg
2026-10-20 12:32:05
(2 days ago)
Repeated unauthorized connection attempts against VNC relay service. Last seen 2026-10-20 12:32 UTC. ...
show more
Repeated unauthorized connection attempts against VNC relay service. Last seen 2026-10-20 12:32 UTC. Automated detection. AS12389 Rostelecom.
show less
Brute-Force
🇫🇷
Murazaki
2026-10-20 09:37:28
(2 days ago)
82.66.93.214 95.71.150.16 - - [20/Oct/2026:11:37:27 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 50 ...
show more
82.66.93.214 95.71.150.16 - - [20/Oct/2026:11:37:27 +0200] "GETROUTERINFO /favicon.ico/ HTTP/1.1" 503 190 "-" "-" "-"
...
show less
Hacking