🇺🇸
TPI-Abuse
2026-10-28 05:55:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 179.0.182.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 01:55:18.617844 2026] [security2:error] [pid 32393:tid 32393] [client 179.0.182.132:43982] M ...
show more
(mod_security) mod_security (id:210350) triggered by 179.0.182.132 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 01:55:18.617844 2026] [security2:error] [pid 32393:tid 32393] [client 179.0.182.132:43982] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yankeetownfishing.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yankeetownfishing.com"] [uri "/"] [unique_id "auGORoPvSL3Ja7h6g0EppgAAAAM"], referer: https://yankeetownfishingguides.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-04 16:19:00
UTC ·
(1 month ago)
MikroTik Enterprise Honeypot
Port Scan
🇳🇱
EGP Abuse Dept
2026-10-03 00:10:51
UTC ·
(1 month ago)
Unauthorized connection to SSH port 22
Port Scan
Hacking
SSH
🇺🇸
MPL
2026-09-30 23:20:05
UTC ·
(1 month ago)
tcp/22 (6 or more attempts)
Port Scan
🇺🇸
鬼影233
2026-09-30 11:59:48
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
NetVexor
2026-09-27 19:05:06
UTC ·
(1 month ago)
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan
Hacking
Brute-Force
2026-09-25 01:04:02
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇺🇸
kot
2026-09-15 11:02:43
UTC ·
(1 month ago)
scan port 22, 179.0.182.132 block
Port Scan
🇫🇷
Zkillu
2026-08-19 20:05:28
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 714 pkts / 1.02 MB to UDP 80 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ...
show more
UDP flood (DDoS) vs AS215599: 714 pkts / 1.02 MB to UDP 80 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
🇫🇷
HaloAgencySAS
2026-08-19 20:05:28
UTC ·
(2 months ago)
UDP flood (DDoS) vs AS215599: 714 pkts / 1.02 MB to UDP 80 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. E ...
show more
UDP flood (DDoS) vs AS215599: 714 pkts / 1.02 MB to UDP 80 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
DDoS Attack
Exploited Host
2026-08-15 18:44:14
UTC ·
(2 months ago)
Port Scanner
Port Scan
🇷🇸
Scan
2026-08-11 13:31:07
UTC ·
(3 months ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇮🇩
hermawan
2026-06-17 13:46:08
UTC ·
(4 months ago)
[Wed Jun 17 20:46:05.607975 2026] [security2:error] [pid 1760258:tid 139897777137344] [client 179.0.182.132:36194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity ...
show more
[Wed Jun 17 20:46:05.607975 2026] [security2:error] [pid 1760258:tid 139897777137344] [client 179.0.182.132:36194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.bmkg.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.bmkg.go.id found within REQUEST_HEADERS:Referer: https://www.bmkg.go.id/ request_line = GET /index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558584-poster-skala-gempa-mmi"] [unique_id "ajKlHZyiCjl6nnnO-rWCqQABFQU"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1760264] [tS3gR7NwXYI] [ajKlHZyiCjl6nnnO-rWCqQABFQU] keep_alive=[1] [2026-06-17 20:46:05.607978] [R:ajKlHZyiCjl6nnnO-rWCqQABFQU] UA:'Mozilla/5.0 (iPhone; CPU iPhon
...
show less
Email Spam
Hacking
🇷🇸
Scan
2026-06-04 00:32:12
UTC ·
(5 months ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇩🇪
SMARTNET
2026-05-27 06:03:53
UTC ·
(5 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 4acf41a8-b801-4675-a9cd-4cf95dcec3e7
DDoS Attack
