|
🇩🇪
acadeova
|
|
Blocked by UFW on vps4 [23/tcp]
Source port: 46554
TTL: 53
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan
IoT Targeted
|
|
🇺🇸
RAP
|
|
2026-10-07 14:09:53 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 103.150.218.93 (PROXINET-INTERNET-103-150-218-93.proxinet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:53:08.984773 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210730) triggered by 103.150.218.93 (PROXINET-INTERNET-103-150-218-93.proxinet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:53:08.984773 2026] [security2:error] [pid 18228:tid 18228] [client 103.150.218.93:37868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bahamascruisersguide.com|F|2"] [data ".greatmysterious.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bahamascruisersguide.com"] [uri "/Blogs-Websites/ www.greatmysterious.com"] [unique_id "asWX9PZ1wGT3Z895owI2_QAAAB8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
2026-10-06T14:34:27.632579+02:00 vps kernel: [7660849.381689] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=103.150.218.93 DST=54.37.14.118 LEN=60 TOS=0x08 PREC=0x20 TTL=42 ID=26867 DF PROTO=TCP SPT=45184 DPT=23 W ...
show more
2026-10-06T14:34:27.632579+02:00 vps kernel: [7660849.381689] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=103.150.218.93 DST=54.37.14.118 LEN=60 TOS=0x08 PREC=0x20 TTL=42 ID=26867 DF PROTO=TCP SPT=45184 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 103.150.218.93 (PROXINET-INTERNET-103-150-218-93.proxinet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:38:37.795001 2026] [security2:error] [pid ...
show more
(mod_security) mod_security (id:210730) triggered by 103.150.218.93 (PROXINET-INTERNET-103-150-218-93.proxinet.co.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:38:37.795001 2026] [security2:error] [pid 14250:tid 14250] [client 103.150.218.93:46572] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||syscoxlegends.com.darkcodedesign.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "syscoxlegends.com.darkcodedesign.net"] [uri "/pgsql/mysql_dump.sql"] [unique_id "asTPrYg8IonuGSeK7gj1ZwAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
denied traffic to a honeypot network. destination port 23.
|
Port Scan
Hacking
|
|
🇵🇱
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /support
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /support
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
🇩🇪
pressler.pro
|
|
Fail2ban - DDoS attack on woocommerce shop
...
|
DDoS Attack
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
🇩🇪
pressler.pro
|
|
Fail2ban - DDoS attack on woocommerce shop
...
|
DDoS Attack
|
|
🇷🇴
INTEQ
|
|
Web attack from 103.150.218.93
|
Web App Attack
|
|
Anonymous
|
|
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
|
Brute-Force
SSH
|
|
🇨🇭
backslash
|
|
|
Bad Web Bot
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
|
🇳🇱
exxos
|
|
HTTP1.x attacks
|
DDoS Attack
|
