🇺🇸
dtorrer
2026-11-11 04:16:58
UTC ·
(23 hours ago)
Brute-force general attack.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 16:23:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:23:50.263798 2026] [security2:error] [pid 29741:tid 29741] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 11:23:50.263798 2026] [security2:error] [pid 29741:tid 29741] [client 186.195.237.233:3954] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kristasrecoverycoaching.com.kildarafarms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kristasrecoverycoaching.com.kildarafarms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avNFFtUrNMzAljbveUmnHAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 13:17:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:17:17.986281 2026] [security2:error] [pid 14215:tid 14215] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:17:17.986281 2026] [security2:error] [pid 14215:tid 14215] [client 186.195.237.233:5006] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lusineweb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lusineweb.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "avMZXZVIXkzHhOVsNroWkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:14:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:14:32.471380 2026] [security2:error] [pid 9785:tid 9785] [client ...
show more
(mod_security) mod_security (id:225170) triggered by 186.195.237.233 (clientes.redenilf.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:14:32.471380 2026] [security2:error] [pid 9785:tid 9785] [client 186.195.237.233:3054] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tckgbookkeeping.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tckgbookkeeping.biz"] [uri "/wp-json/wp/v2/users"] [unique_id "avKoOMLj4EMywQnjKRqT5QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-09 21:34:36
UTC ·
(2 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/raw/commit/e2ad424917e7d2149535f79bd46fb04cc5111ea2/internal/api/fleet_except.go | src_port: 39778 | ua: Mozilla/5.0 (Windows ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/raw/commit/e2ad424917e7d2149535f79bd46fb04cc5111ea2/internal/api/fleet_except.go | src_port: 39778 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-09-10 00:55:24
UTC ·
(2 months ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Bad Web Bot
2026-08-28 09:18:37
UTC ·
(2 months ago)
denied traffic to a non-approved destination port. destination port 25958.
Port Scan
🇺🇸
kosada.com
2026-08-27 00:19:41
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
鬼影233
2026-08-26 18:02:03
UTC ·
(2 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇨🇦
design2web.ca
2026-07-23 07:18:47
UTC ·
(3 months ago)
[UniFi FW] Inbound network intrusion attempt on port 16834 | Policy: Region Blocking | Proto: UDP | Src: 186.195.237.233:38055 | SrcRegion: BR | Detected: 2026-07-23 04:30:24 UTC | ISP: ISP PREMIUM TELECOM S/A | D2W UniFi AbuseIPDB Reporter v2
Port Scan
🇺🇸
kosada.com
2026-07-06 19:42:27
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇧🇷
cibersecoptidata
2026-07-06 02:51:09
UTC ·
(4 months ago)
Port scan / Unsolicited traffic.
Port Scan
2026-07-05 21:01:44
UTC ·
(4 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇳🇵
radheykrishna.com.np
2026-07-05 16:51:53
UTC ·
(4 months ago)
Jul 5 22:36:53 kernel: [6760194.810067] [UFW BLOCK] IN=ens160 OUT= SRC=186.195.237.233 LEN=61 TOS=0x00 PREC=0x00 TTL=52 ID=56485 DF PROTO=UDP SPT=58140 DPT=45419 LEN=41
...
Port Scan
2026-07-05 01:34:12
UTC ·
(4 months ago)
Port scan / connection attempts on port 47587/UDP to unused IP
Port Scan
