🇵🇱
MatStef132
2026-10-21 20:51:12
(3 days ago)
MatShield L7: blocked on panel.averisca.cloud (ua-quarantined)
Bad Web Bot
🇵🇱
MatStef132
2026-10-19 19:19:03
(5 days ago)
MatShield L7: blocked on politempire.org (ua-quarantined)
Bad Web Bot
🇩🇪
netclix.gr
2026-10-14 00:02:24
(1 week ago)
(old_win_chrome) Blocked old Windows Chrome 45.190.85.43 (VE/Venezuela/-)
Hacking
🇮🇳
Mr.Singh
2026-10-11 09:32:45
(1 week ago)
NFT blocked 45.190.85.43 after 2 rejections on 11-Oct-2026.
Port Scan
Brute-Force
🇩🇪
Packets-Decreaser.NET
2026-10-11 01:15:23
(1 week ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
Vegascosmetics
2026-10-09 01:19:44
(2 weeks ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 66>=65, Abuse 62, NonEU, first-seen, Change* path)
show less
Hacking
Exploited Host
Web App Attack
🇩🇪
edgeshield
2026-10-07 15:37:16
(2 weeks ago)
Automated web request flooding / DDoS (EdgeShield WAF).
DDoS Attack
🇺🇸
benjensen
2026-10-06 14:30:02
(2 weeks ago)
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
Brute-Force
SSH
🇵🇱
MatStef132
2026-10-05 19:25:07
(2 weeks ago)
MatShield L7: blocked on fivevault.net (sec-ch-ua-on-non-chromium)
DDoS Attack
🇺🇸
TPI-Abuse
2026-10-05 14:26:10
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:26:05.471270 2026] [security2:error] [pid 3740:tid 3740] [client 45.190.85.43:42996] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thehealthcontent.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thehealthcontent.com"] [uri "/"] [unique_id "asOzfZRnk7PgB7tdq36wagAAAAw"], referer: https://buyhighdabacklinks.store/dir/ethical-link-building-services-209392
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-10-04 22:47:29
(2 weeks ago)
tcp/22 (3 or more attempts)
Port Scan
2026-10-03 01:51:59
(3 weeks ago)
Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shi ...
show more
Repeated POST flood to payment-page UUID paths and/or the integration base path. Evidence: Bunny Shield HTTP event export; 45 requests from this client IP between 2026-10-03T01:48:47.418+00:00 and 2026-10-03T01:51:59.405+00:00; peak 20 requests in one UTC calendar second. Methods: POST=45. Top paths (host and payment IDs redacted): /<uuid> (45). JA4: t13d1515h2_8daaf6152771_e4c2b8c727f2. CDN actions: Blocked=45. Counts refer to the supplied log window.
show less
DDoS Attack
2026-10-02 11:22:39
(3 weeks ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-02 01:02:22
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 21:02:14.841713 2026] [security2:error] [pid 2102:tid 2102] [client 45.190.85.43:38706] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerryhetrick.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerryhetrick.com"] [uri "/"] [unique_id "ar8ClqxMxO-S4548sa3gdwAAAAk"], referer: https://sitebacklinkgenerator.shop/dir/organic-visibility-backlinks-106177
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 05:41:53
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.190.85.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 01:41:48.604123 2026] [security2:error] [pid 16510:tid 16510] [client 45.190.85.43:35648] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||janton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "janton.com"] [uri "/"] [unique_id "aryhHJTCaPidx29xIbmtaAAAABU"], referer: https://linkbuildingtools.online/dir/trusted-backlink-services-104993
show less
Brute-Force
Bad Web Bot
Web App Attack
