๐ฉ๐ช
Vegascosmetics
2026-11-06 05:23:44
UTC ยท
(3 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57)
Hacking
Exploited Host
Web App Attack
๐ซ๐ท
LRob
2026-11-02 20:45:42
UTC ยท
(1 week ago)
Not following 301 redirects โ wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E148 Safari/604.1
Bad Web Bot
๐จ๐ฟ
lp
2026-11-01 17:17:47
UTC ยท
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 190.80.24.151
2026-11-01T18:11:14+0100 vpn Access-Reject station: 190.80.24.151
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2026-11-01 10:37:41
UTC ยท
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 190.80.24.151
2026-11-01T11:24:27+0100 vpn Access-Reject station: 190.80.24.151
Brute-Force
Web App Attack
๐จ๐ฟ
Countryman
2026-11-01 01:10:02
UTC ยท
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐ช๐ธ
Mugen
2026-10-31 23:59:25
UTC ยท
(1 week ago)
Unauthorized VPN login attempts
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-31 14:57:11
UTC ยท
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:57:04.735509 2026] [security2:error] [pid 32618:tid 32618] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:57:04.735509 2026] [security2:error] [pid 32618:tid 32618] [client 190.80.24.151:51604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dougrhodes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dougrhodes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auYBwPValXwN-bzOkUQkeAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐น
Malta
2026-10-30 04:48:33
UTC ยท
(1 week ago)
190.80.24.151 - - [30/Oct/2026:05:48:33 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36"
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 18:16:02
UTC ยท
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:15:54.817269 2026] [security2:error] [pid 23555:tid 23555] [clie ...
show more
(mod_security) mod_security (id:225170) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:15:54.817269 2026] [security2:error] [pid 23555:tid 23555] [client 190.80.24.151:41800] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crystaljohns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crystaljohns.com"] [uri "/wp/wp-json/wp/v2/users"] [unique_id "at-Y2gclfw8K9swtYKRYegAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐น
Malta
2026-10-17 21:42:27
UTC ยท
(3 weeks ago)
190.80.24.151 - - [17/Oct/2026:23:42:27 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
๐ฎ๐น
CoreTech srl
2026-10-17 12:30:27
UTC ยท
(3 weeks ago)
cloudlinux2 fail2ban: 2026-10-17 12:30:35,208 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 106.219.146.97cloudlinux2 fail2ban: 2026-10-17 12:30:43,636 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 203.26.81.1 ...
show more
cloudlinux2 fail2ban: 2026-10-17 12:30:35,208 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 106.219.146.97cloudlinux2 fail2ban: 2026-10-17 12:30:43,636 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 203.26.81.1 - 2026-10-17 12:30:43cloudlinux2 fail2ban: 2026-10-17 12:30:55,969 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 190.80.24.151 - 2026-10-17 12:30:55cloudlinux2 fail2ban: 2026-10-17 12:31:16,983 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 190.80.24.151 - 2026-10-17 12:31:16cloudlinux2 fail2ban: 2026-10-17 12:31:18,616 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 41.210.142.133 - 2026-10-17 12:31:18cloudlinux2 fail2ban: 2026-10-17 12:31:30,489 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Ban 190.80.24.151cloudlinux2 fail2ban: 2026-10-17 12:31:29,988 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 190.80.24.151 - 2026-10-17 12:31:29cloudlinux2 fail2ban: 2026-10-17 12:31:30
show less
Brute-Force
๐ฉ๐ช
FeG Deutschland
2026-10-17 00:19:26
UTC ยท
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐บ๐ธ
SX Communications
2026-10-13 02:05:47
UTC ยท
(3 weeks ago)
HTTP application-layer DoS / botnet traffic from 190.80.24.151: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack
Bad Web Bot
Exploited Host
๐ซ๐ท
Tilellit.PRO
2026-10-06 00:36:28
UTC ยท
(1 month ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-29 14:45:23
UTC ยท
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:45:15.467703 2026] [security2:error] [pid 4260:tid 4260] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 190.80.24.151 (151-24-pool.dsl.gol.net.gy): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:45:15.467703 2026] [security2:error] [pid 4260:tid 4260] [client 190.80.24.151:51902] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dutchgreenrecycling.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dutchgreenrecycling.com"] [uri "/"] [unique_id "arvO-5bxbwalTfslbshqAgAAAAw"], referer: https://bestwebsitechecker.online/dir/white-hat-link-building-60065
show less
Brute-Force
Bad Web Bot
Web App Attack