🇷🇺
e⁻
2026-09-13 15:28:47
(2 days ago)
2026-09-13T15:28:47Z Minecraft server scanner
Port Scan
🇺🇸
gui-ying233
2026-09-11 11:56:18
(4 days ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
show less
Bad Web Bot
🇩🇪
heyzg
2026-09-09 13:14:39
(6 days ago)
LLM Inference API Requests (Ollama) (observed): 12 HTTP, 12s
Hacking
Web App Attack
🇯🇵
Execoop
2026-09-06 00:38:00
(1 week ago)
API LLMjacking (Ollama) (observed): 3 HTTP; attempted cryptomining; Ollama: /v1/chat/completions
Hacking
Web App Attack
🇸🇬
heyzg
2026-09-03 21:33:06
(1 week ago)
API LLMjacking (Ollama) (observed): 3 HTTP; attempted cryptomining; Ollama: /api/generate
Hacking
Web App Attack
🇺🇸
Execoop
2026-09-03 02:59:41
(1 week ago)
API LLMjacking (Ollama) (observed): 3 HTTP, 8s; attempted outbound scan & cryptomining; Ollama: /api ...
show more
API LLMjacking (Ollama) (observed): 3 HTTP, 8s; attempted outbound scan & cryptomining; Ollama: /api/version,/api/tags,/v1/chat/completions
show less
Hacking
Web App Attack
🇹🇭
MWA SOC
2026-07-14 04:09:05
(2 months ago)
Hacking
🇺🇸
kosada.com
2026-07-06 20:05:05
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
Duggy_Tuxy🧱
2026-07-05 20:48:26
(2 months ago)
[NODE01] Banned by SysWarden Firewall (Jail: L3-PORTSCAN)
Port Scan
2026-07-05 00:09:30
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇨🇦
polycoda
2026-07-04 10:55:03
(2 months ago)
AutoBlock: 📡 Port Scan (Non Decay-Based)
Port Scan
🇺🇸
TPI-Abuse
2026-02-01 04:38:34
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 23:38:28.339653 2026] [security2:error] [pid 624789:tid 624789] [client 108.181.70.65:56564] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||balmedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "balmedia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX7YxO6lcTPoKmzpsBjxOQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-30 02:19:59
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 21:19:54.099466 2026] [security2:error] [pid 21096:tid 21096] [client 108.181.70.65:58978] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arrowheadornamentals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arrowheadornamentals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXwVSoXOcv0xIXA5RSghEwAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 22:13:19
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 17:13:15.042344 2026] [security2:error] [pid 30101:tid 30101] [client 108.181.70.65:59334] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||networkparanoia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "networkparanoia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXvbe8zifMMN36Jt26sh3AAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-29 18:32:30
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 108.181.70.65 (unassigned.psychz.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 13:32:25.281295 2026] [security2:error] [pid 32687:tid 32687] [client 108.181.70.65:34854] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hpepaper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hpepaper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXunuUEEDCARyjy2EvMTvQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack