🇺🇸
lostswordfish.com
2026-10-19 12:10:06
(2 days ago)
Wordfence waf block on floridaactioncommittee
Web App Attack
🇨🇭
backslash
2026-10-18 16:48:00
(2 days ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇩🇪
Vegascosmetics
2026-10-18 09:42:37
(3 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (61, Abuse: 53)
show less
Hacking
Exploited Host
Web App Attack
🇫🇮
mikkopal88
2026-10-15 18:15:24
(5 days ago)
TCP SYN port scan to Telnet 23-2323
Port Scan
IoT Targeted
🇺🇸
TPI-Abuse
2026-10-14 22:13:23
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:13:17.127962 2026] [security2:error] [pid 4669:tid 4669] [client 102.210.153.218:50946] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||indoorsfinishing.com.saadeh.ws|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "indoorsfinishing.com.saadeh.ws"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as_-fcYzwKyJJWCJODebsQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-11 18:05:52
(1 week ago)
Repeated unauthorized connection attempts to restricted service observed.
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-10-09 16:31:34
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accès: /wp-json/wp/v2/users/me [RATE LIMITED - 1800s quarantine ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /wp-json/wp/v2/users/me [RATE LIMITED - 1800s quarantine] | Pays: KE | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.3
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-09 15:36:14
(1 week ago)
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.position.asc&productLi ...
show more
Shop search flood (L7 DDoS) | path: /111-bons-plan-vtt | query: order=product.position.asc&productListView=grid&q=Famille-Lumen/Capacit%C3%A9+batterie-360+Wh | src_port: 48105
show less
DDoS Attack
Web App Attack
2026-10-08 03:08:15
(1 week ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-06 05:05:48
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 01:05:42.381910 2026] [security2:error] [pid 19124:tid 19124] [client 102.210.153.218:26362] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lacycustombuilt.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lacycustombuilt.com"] [uri "/"] [unique_id "asSBpt6-Ub56Je57Wm0EPAAAAAU"], referer: https://freebacklinkgeneration.store/dir/backlink-seo-experts-117387
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-10-04 18:00:59
(2 weeks ago)
tcp/23 (2 or more attempts)
Port Scan
🇫🇷
Entalpi.net
2026-10-03 13:16:13
(2 weeks ago)
Tried to hit sensible closed port commonly used in attacks
Port Scan
Hacking
2026-10-03 09:55:50
(2 weeks ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-10-02 11:55:54
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:55:50.528618 2026] [security2:error] [pid 14796:tid 14796] [client 102.210.153.218:49858] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fernfield.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fernfield.com"] [uri "/"] [unique_id "ar-bxmewezZPH2B92Vz0qQAAAAg"], referer: https://blogbacklinks.shop/dir/trusted-backlink-services-71593
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:14:56
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 102.210.153.218 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:14:50.409300 2026] [security2:error] [pid 2162:tid 2162] [client 102.210.153.218:34900] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vividlee.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vividlee.com"] [uri "/"] [unique_id "ar8vuo3m8mDXmgbw5vYGYwAAABI"], referer: https://seoserviceslinkbuilding.space/dir/professional-backlink-building-227254
show less
Brute-Force
Bad Web Bot
Web App Attack
