๐บ๐ธ
TPI-Abuse
2026-10-17 00:41:16
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 200.110.207.102 (siconect.com.br): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 200.110.207.102 (siconect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:41:11.058599 2026] [security2:error] [pid 12635:tid 12635] [client 200.110.207.102:37942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superlamb.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atLEJwpj6qdvLx5fstb_JQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
stinpriza
2026-10-16 21:16:43
(20 hours ago)
Web App Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 23:49:48
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 200.110.207.102 (siconect.com.br): 1 in the las ...
show more
(mod_security) mod_security (id:225170) triggered by 200.110.207.102 (siconect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:49:42.497360 2026] [security2:error] [pid 6374:tid 6374] [client 200.110.207.102:37987] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tigerpathteam.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tigerpathteam.org"] [uri "/wp-json/wp/v2/users"] [unique_id "atAVFpnUmfImfBpOGwYC-wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-09 20:38:16
(1 week ago)
๐ฅ Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Port Scan
Web App Attack
๐จ๐ฟ
Countryman
2026-09-29 00:10:02
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-24 12:23:29
(3 weeks ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-12 09:15:37
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 200.110.207.102 (siconect.com.br): 1 in the las ...
show more
(mod_security) mod_security (id:210730) triggered by 200.110.207.102 (siconect.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:15:34.453179 2026] [security2:error] [pid 3230779:tid 3230806] [client 200.110.207.102:62710] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.jean-paullederer.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jean-paullederer.com"] [uri "/[email protected] "] [unique_id "aqUYNjciDHybfFlEEz6IlwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-08-26 20:48:37
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-08-15 10:01:01
(2 months ago)
Blocked by firewall on hugin [23/tcp] | Rule: UFW | SPT: 37186 | TTL: 51 | LEN: 60 | TOS: 0x00 โข Rep ...
show more
Blocked by firewall on hugin [23/tcp] | Rule: UFW | SPT: 37186 | TTL: 51 | LEN: 60 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
IoT Targeted
๐ณ๐ฑ
VMHeaven.io
2026-08-15 07:02:01
(2 months ago)
Blocked by UFW [23/tcp]
Source port: 35312
TTL: 53
Packet length: 60
Port Scan
Hacking
Brute-Force
๐บ๐ธ
MPL
2026-08-14 12:33:44
(2 months ago)
tcp/23
Port Scan
2026-08-14 08:18:56
(2 months ago)
MikroTik Enterprise Honeypot
Port Scan
๐ฉ๐ช
reznekcs
2026-08-14 05:03:14
(2 months ago)
Blocked by UFW firewall
Brute-Force
๐บ๐ธ
RAP
2026-08-13 16:15:51
(2 months ago)
2026-08-13 16:15:51 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐ซ๐ท
thecocasio
2026-08-13 11:43:23
(2 months ago)
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running n ...
show more
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-08-13T11:43:23Z.
show less
Port Scan