🇩🇪
Vegascosmetics
2026-06-17 05:59:52
(1 day ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇮🇩
hermawan
2026-06-03 21:23:05
(2 weeks ago)
[Thu Jun 04 04:23:02.928262 2026] [security2:error] [pid 227673:tid 140148351145664] [client 190.113 ...
show more
[Thu Jun 04 04:23:02.928262 2026] [security2:error] [pid 227673:tid 140148351145664] [client 190.113.43.100:50620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "www.yandex.go.id" at REQUEST_HEADERS:Referer. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "582"] [id "440068"] [msg "BAD Referer"] [data "Matched Data: www.yandex.go.id found within REQUEST_HEADERS:Referer: https://www.yandex.go.id/ request_line = GET /index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/alamat-kantor/list-all-categories/555556811-mengakses-halaman-web-https-karangploso-jatim-bmkg-go-id-secara-offline-dan-menginstallnya-di-hp-android-atau-di-komputer"] [unique_id "aiCbNkM47KSb0MC_XPDHzwAAUQY"], referer https://www.yandex
...
show less
Email Spam
Hacking
🇬🇧
PeravixGroup
2026-05-23 21:14:46
(3 weeks ago)
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ...
show more
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
show less
IoT Targeted
Brute-Force
2026-05-11 14:10:22
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇨🇦
alexbfr
2026-05-11 13:51:08
(1 month ago)
Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.
Port Scan
🇺🇸
RAP
2026-05-05 04:04:01
(1 month ago)
2026-05-05 04:04:01 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
2026-05-01 04:24:48
(1 month ago)
Port scanning. Port: 23
Port Scan
🇦🇺
clapper
2026-04-22 04:21:01
(1 month ago)
190.113.43.100 (DO/Dominican Republic/-), more than 50 Apache 403 hits in the last 600 secs; ID: rub
Brute-Force
Bad Web Bot
🇦🇺
screwlooseit.com.au
2026-04-19 21:01:47
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
NI/Nicaragua/-
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 18:38:21
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 14:38:17.782618 2026] [security2:error] [pid 2611933:tid 2611933] [client 190.113.43.100:58396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 190.113.43.100 (+1 hits since last alert)|proyectomanhattan.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "proyectomanhattan.info"] [uri "/xmlrpc.php"] [unique_id "aeEsmYU8K0flt_RcWmD06wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 16:00:29
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 12:00:22.690007 2026] [security2:error] [pid 3919899:tid 3919899] [client 190.113.43.100:61122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 190.113.43.100 (+1 hits since last alert)|anchor07.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "anchor07.com"] [uri "/xmlrpc.php"] [unique_id "ad-2FknarqMb8qMttskcUwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 05:43:15
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 01:43:12.317907 2026] [security2:error] [pid 655033:tid 655056] [client 190.113.43.100:51120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 190.113.43.100 (+1 hits since last alert)|woofnrose.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "woofnrose.com"] [uri "/xmlrpc.php"] [unique_id "ad3T8KbNpOTOj3v3v2cr-wAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 04:25:58
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 00:25:50.589575 2026] [security2:error] [pid 1856897:tid 1856917] [client 190.113.43.100:64366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 190.113.43.100 (+1 hits since last alert)|travelusa.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "travelusa.us"] [uri "/xmlrpc.php"] [unique_id "ad3Bzq4Sw6C7-Hyxki_aTAAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 01:52:50
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 190.113.43.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 21:52:45.052365 2026] [security2:error] [pid 2472608:tid 2472608] [client 190.113.43.100:10321] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 190.113.43.100 (+1 hits since last alert)|webuychesterfieldhouses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webuychesterfieldhouses.com"] [uri "/xmlrpc.php"] [unique_id "adxMbULCNjTgCsrgDL7igAAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-12 23:37:06
(2 months ago)
(wordpress) Failed wordpress login from 190.113.43.100 (DO/Dominican Republic/-)
Brute-Force