🇩🇪
LRob
2026-11-09 14:10:14
UTC ·
(3 days ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/a60dc0cfbfad60a4a946c7e42f4bdd705d45b498/THIRD_PARTY_LICENSES | src_port: 8181 | ua: Mozilla/5.0 (Macintosh; Int ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/blame/commit/a60dc0cfbfad60a4a946c7e42f4bdd705d45b498/THIRD_PARTY_LICENSES | src_port: 8181 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 | 2026-11-09 14:10 UTC
show less
DDoS Attack
Bad Web Bot
2026-11-08 23:37:33
UTC ·
(4 days ago)
WEB attack
Brute-Force
🇨🇿
Countryman
2026-11-06 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇷
LRob
2026-11-05 02:56:21
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 20:44:59
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 45.178.13.116 (dynamic-45-178-13-116.walix.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:44:54.973665 2026] [security2:error] [pid 16941:tid 16941] [ ...
show more
(mod_security) mod_security (id:225170) triggered by 45.178.13.116 (dynamic-45-178-13-116.walix.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:44:54.973665 2026] [security2:error] [pid 16941:tid 16941] [client 45.178.13.116:35931] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.plazahacienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.plazahacienda.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "as_pxm6QkQXtS7iRxTMVpwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-27 02:00:15
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2026-08-20 01:11:57
UTC ·
(2 months ago)
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: order=product.sales.desc&q=Taille-M-XX ...
show more
L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded | path: /7-velo-electrique-ville | query: order=product.sales.desc&q=Taille-M-XXL%2FMarque+moteur-TQ
show less
DDoS Attack
Web App Attack
🇺🇸
kosada.com
2026-08-08 15:19:20
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-26 05:05:51
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 17:09:39
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇮
notelseit
2026-04-19 07:19:51
UTC ·
(6 months ago)
2026-04-19T09:19:42.238798+02:00 mail dovecot: auth-worker(776041): conn unix:auth-worker (pid=776038,uid=110): auth-worker<24>: sql([email protected] ,45.178.13.116,<uvVuActPwPQtsg10>): Password mismatch
2026-04-19T09:19:49.012590+02:00 mail dovecot ...
show more
2026-04-19T09:19:42.238798+02:00 mail dovecot: auth-worker(776041): conn unix:auth-worker (pid=776038,uid=110): auth-worker<24>: sql([email protected] ,45.178.13.116,<uvVuActPwPQtsg10>): Password mismatch
2026-04-19T09:19:49.012590+02:00 mail dovecot: auth-worker(776041): conn unix:auth-worker (pid=776038,uid=110): auth-worker<26>: sql([email protected] ,45.178.13.116,<uvVuActPwPQtsg10>): Password mismatch
2026-04-19T09:19:51.462252+02:00 mail dovecot: pop3-login: Disconnected: Connection closed (auth failed, 2 attempts in 10 secs): user=<[email protected] >, method=PLAIN, rip=45.178.13.116, lip=65.21.131.50, TLS: Connection closed, session=<uvVuActPwPQtsg10>
...
show less
Brute-Force
Email Spam
