πΊπΈ
mnsf
2026-10-12 09:05:15
(2 days ago)
Abuse Detected (20)
Brute-Force
Web App Attack
π©πͺ
Vegascosmetics
2026-10-12 08:54:39
(2 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 77>=65, Abuse 85, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
π§πΎ
lns.bz
2026-10-12 08:38:33
(2 days ago)
Too many 404 requests [BY]
Web App Attack
Anonymous
2026-10-12 08:38:15
(2 days ago)
Bad Web Bot
π¬π§
consul.to
2026-10-12 08:37:14
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
π§π·
Halux
2026-10-12 08:34:28
(2 days ago)
136.118.179.99 Web Application Firewall multiple violations
Hacking
Web App Attack
π¨π
backslash
2026-10-12 08:33:00
(2 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Anonymous
2026-10-12 08:27:03
(2 days ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 08:25:54
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 136.118.179.99 (99.179.118.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.118.179.99 (99.179.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:25:46.489783 2026] [security2:error] [pid 11868:tid 11868] [client 136.118.179.99:62341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ibeautyexchange.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ibeautyexchange.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asyZiiH7T3E_wwPPofKHKQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Hazzard
2026-10-12 08:24:03
(2 days ago)
(wordpress) Failed wordpress login from 136.118.179.99 (US/United States/Oregon/The Dalles/99.179.11 ...
show more
(wordpress) Failed wordpress login from 136.118.179.99 (US/United States/Oregon/The Dalles/99.179.118.136.bc.googleusercontent.com/[redacted]): (CF_ENABLE)
show less
Brute-Force
π¬π§
Apache
2026-10-12 08:17:17
(2 days ago)
(mod_security) mod_security (id:210410) triggered by 136.118.179.99 (US/United States/99.179.118.136 ...
show more
(mod_security) mod_security (id:210410) triggered by 136.118.179.99 (US/United States/99.179.118.136.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
π©πͺ
maxpower
2026-10-12 08:12:41
(2 days ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.118.179.99 (US/United States/99.179.118.13 ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.118.179.99 (US/United States/99.179.118.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.118.179.99 - - [12/Oct/2026:10:12:35 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" host=iampieriarredamenti.it
136.118.179.99 - - [12/Oct/2026:10:12:35 +0200] "GET //?author=1 HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" host=iampieriarredamenti.it
2026/10/12 10:12:35 [error] 281140#281140: *2683631 access forbidden by rule, client: 136.118.179.99, server: iampieriarredamenti.it, request: "GET //?author=2 HTTP/1.1", host: "iampieriarredamenti.it"
show less
Port Scan
πΊπΈ
TPI-Abuse
2026-10-12 08:10:21
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 136.118.179.99 (99.179.118.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.118.179.99 (99.179.118.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:10:16.151775 2026] [security2:error] [pid 3875:tid 3923] [client 136.118.179.99:61924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iamfluff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iamfluff.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "asyV6EzJ6vkNzIq0_rpx1gAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
valornode
2026-10-12 08:09:18
(2 days ago)
Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-probing | ASN: 396 ...
show more
Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-probing | ASN: 396982 (GOOGLE-CLOUD-PLATFORM) | Country: US | Range: 136.112.0.0/13
show less
Brute-Force
SSH
πΊπΈ
IndigoRidge
2026-10-12 08:01:20
(2 days ago)
136.118.179.99 - - [12/Oct/2026:04:01:17 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 486 ...
show more
136.118.179.99 - - [12/Oct/2026:04:01:17 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 4865 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.118.179.99 - - [12/Oct/2026:04:01:17 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 4675 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.118.179.99 - - [12/Oct/2026:04:01:19 -0400] "GET //?author=1 HTTP/1.1" 301 4765 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.118.179.99 - - [12/Oct/2026:04:01:19 -0400] "GET //?author=2 HTTP/1.1" 301 4847 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.118.179.99 - - [12/Oct/2026:04:01:20 -0400] "GET //?author=3 HTTP/1.1" 301 4749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
Web App Attack