🇬🇧
iss-security-operations
2026-10-03 16:02:56
(1 week ago)
Seen attempting a bruteforce against SMTP services
Brute-Force
2026-10-01 12:16:10
(1 week ago)
SMTP brute force - auth failed
Brute-Force
Exploited Host
🇩🇪
Paul Smith
2026-09-30 23:06:10
(1 week ago)
Email Auth Brute force attack 2/1 in last day
Brute-Force
2026-05-13 09:25:56
(4 months ago)
FortiWeb WAF: 20 attacks detected. Threat Score: 6400. Types: Client Management(10), GEO IP(10). Ori ...
show more
FortiWeb WAF: 20 attacks detected. Threat Score: 6400. Types: Client Management(10), GEO IP(10). Origin: China.
show less
Web App Attack
🇺🇸
jcbriar
2026-05-13 06:10:29
(4 months ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇨🇦
SSH-Admin
2026-05-11 19:00:04
(4 months ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2026-05-11 14:18:10
(4 months ago)
Probing for Exploits on ns210
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 18:46:02
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 14:45:38.414110 2026] [security2:error] [pid 12289:tid 12289] [client 182.143.92.19:3807] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.thesalonx.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thesalonx.com"] [uri "/2017.bak"] [unique_id "agDSUkO1OKXlY_g6wrY6UwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 12:29:16
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 08:27:57.949331 2026] [security2:error] [pid 3429:tid 3429] [client 182.143.92.19:4566] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thehomedaleinn.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thehomedaleinn.com"] [uri "/127.0.0.1.sql"] [unique_id "agB5zZGYGN2GNDdExVP-TAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 09:44:43
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 05:44:00.339491 2026] [security2:error] [pid 28725:tid 28796] [client 182.143.92.19:4536] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||universalpeacecongress.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "universalpeacecongress.com"] [uri "/2011.bak"] [unique_id "agBTYHsUGajK0LIecleJ_wAAAcU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 08:39:12
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 04:38:13.353472 2026] [security2:error] [pid 6555:tid 6555] [client 182.143.92.19:3547] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tracdynamics.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tracdynamics.com"] [uri "/2021.sql"] [unique_id "agBD9Wl2Ii2E55dWw6fOpgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 04:11:57
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 00:11:48.099227 2026] [security2:error] [pid 11104:tid 11104] [client 182.143.92.19:3291] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.theateroobleck.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.theateroobleck.com"] [uri "/127.0.0.1.sql"] [unique_id "agAFhBfJznYCycrMes5YbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-05-10 03:05:38
(5 months ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 02:21:21
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 182.143.92.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 22:20:24.971245 2026] [security2:error] [pid 16665:tid 16665] [client 182.143.92.19:3805] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thehiddengemmalta.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thehiddengemmalta.com"] [uri "/www.sql"] [unique_id "af_raBxZ1yXaOlWo815D0wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
