🇳🇱
javierin
2026-11-07 21:47:38
UTC ·
(16 hours ago)
221.239.90.67 - ollama.javierin.com - - [07/Nov/2026:21:47:36 +0000] "GET / HTTP/1.1" 301 162 "https://www.baidu.com" "Mozilla/5.0 (Linux; Android 12; redroid12_arm64 Build/SQ1D.220205.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrom ...
show more
221.239.90.67 - ollama.javierin.com - - [07/Nov/2026:21:47:36 +0000] "GET / HTTP/1.1" 301 162 "https://www.baidu.com" "Mozilla/5.0 (Linux; Android 12; redroid12_arm64 Build/SQ1D.220205.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/122.0.6261.119 Mobile Safari/537.36 uni-app"
221.239.90.67 - ollama.javierin.com - - [07/Nov/2026:21:47:37 +0000] "GET / HTTP/2.0" 200 4728 "https://www.baidu.com" "Mozilla/5.0 (Linux; Android 12; redroid12_arm64 Build/SQ1D.220205.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/122.0.6261.119 Mobile Safari/537.36 uni-app"
...
show less
Web App Attack
Hacking
🇧🇷
radardatelecom
2026-11-07 16:54:10
UTC ·
(21 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:50:57
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:50:53.508081 2026] [security2:error] [pid 12694:tid 12694] [client 221.239.90.67:2202] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:50:53.508081 2026] [security2:error] [pid 12694:tid 12694] [client 221.239.90.67:2202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.educationhelptips.banis-associates.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.educationhelptips.banis-associates.com"] [uri "/"] [unique_id "au9I3afm4qSg56Lw4zGneQAAABI"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-07 00:20:38
UTC ·
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
pixiekat
2026-11-06 19:08:14
UTC ·
(1 day ago)
Banned by fail2ban (modsec-tripwire, 1 hits) [msg "Conflicting Connection header (crawler fingerprint)"]
Bad Web Bot
Web App Attack
🇺🇸
HamSammich
2026-11-06 17:29:19
UTC ·
(1 day ago)
Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-11-06T17:29Z).
Port Scan
Web App Attack
🇵🇱
MatStef132
2026-11-06 16:54:14
UTC ·
(1 day ago)
MatShield L7: blocked on a protected site (sec-ch-ua-unterminated-string)
DDoS Attack
🇺🇸
TPI-Abuse
2026-11-06 12:29:19
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:29:13.237809 2026] [security2:error] [pid 26534:tid 26534] [client 221.239.90.67:2068] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:29:13.237809 2026] [security2:error] [pid 26534:tid 26534] [client 221.239.90.67:2068] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pcga.golf|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pcga.golf"] [uri "/"] [unique_id "au3IGcHKIiTy1urc7U26AgAAAAw"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Coolnagour
2026-11-05 22:06:43
UTC ·
(2 days ago)
httpprobe: banned during check /
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-05 15:44:09
UTC ·
(2 days ago)
[05/Nov/2026:17:44:09 +0200] -- 221.239.90.67 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 18:12:12
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:12:06.677632 2026] [security2:error] [pid 24740:tid 24740] [client 221.239.90.67:2686] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:12:06.677632 2026] [security2:error] [pid 24740:tid 24740] [client 221.239.90.67:2686] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ww-bbs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ww-bbs.com"] [uri "/fclboosters"] [unique_id "aut1dpVBStRgO_EJkN9cEgAAACU"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hotzmatic
2026-11-04 17:35:05
UTC ·
(3 days ago)
Suricata IDS: SURICATA HTTP Request excessive header repetition (2 events observed on private honeypot sensor)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 14:37:33
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 09:37:26.371525 2026] [security2:error] [pid 17706:tid 17706] [client 221.239.90.67:2126] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 09:37:26.371525 2026] [security2:error] [pid 17706:tid 17706] [client 221.239.90.67:2126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oldmaninthepeanut.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oldmaninthepeanut.com"] [uri "/"] [unique_id "autDJkyZ1JmM3IwQ2R_SxQAAABA"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:56:50
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:56:43.484916 2026] [security2:error] [pid 13235:tid 13235] [client 221.239.90.67:2060] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:56:43.484916 2026] [security2:error] [pid 13235:tid 13235] [client 221.239.90.67:2060] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||autodiscover.affordablehomegoods.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "autodiscover.affordablehomegoods.com"] [uri "/autodiscover/autodiscover.xml"] [unique_id "auqCy5RLH4ZlNDhn6Z4YtAAAAA0"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:36:40
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:36:36.330284 2026] [security2:error] [pid 7412:tid 7412] [client 221.239.90.67:2118] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 221.239.90.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:36:36.330284 2026] [security2:error] [pid 7412:tid 7412] [client 221.239.90.67:2118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.acmax.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.acmax.com"] [uri "/"] [unique_id "aupwBPTnSeirETr3QDcsVwAAAAo"], referer: https://www.baidu.com
show less
Brute-Force
Bad Web Bot
Web App Attack
