2026-06-09 16:15:05
(2 weeks ago)
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signatur ...
show more
Botnet activity. Attribution: Angara Technologies Group / mikhail-smirnov-79830322 | Attack Signature Blocked: /wishlist/index/add/product/11101/form_key/EEKiHwx9BQUfJMIu/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-05-31 23:48:30
(3 weeks ago)
Kingcopy(AI-IDS) Report: IP 63.143.95.190 wurde nach 3 Angriffsversuchen automatisch geblockt. Patte ...
show more
Kingcopy(AI-IDS) Report: IP 63.143.95.190 wurde nach 3 Angriffsversuchen automatisch geblockt. Pattern: High Priority: ChangeCountry - Vegas Cosmetics Security System
show less
DDoS Attack
Hacking
Exploited Host
🇺🇸
EarthAsylum
2026-05-20 20:34:59
(1 month ago)
Repeated exploit attempts on WordPress entry points (prohibited XML method)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:52:53
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelb ...
show more
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:52:49.035606 2026] [security2:error] [pid 30499:tid 30499] [client 63.143.95.190:49777] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 63.143.95.190 (+1 hits since last alert)|slattery-law.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "slattery-law.com"] [uri "/xmlrpc.php"] [unique_id "ag4DAWzyRQsOM49QKOWA8QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-05-20 05:02:52
(1 month ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 04:17:35
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelb ...
show more
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:17:28.146158 2026] [security2:error] [pid 16269:tid 16299] [client 63.143.95.190:49210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 63.143.95.190 (+1 hits since last alert)|dasperformance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dasperformance.com"] [uri "/xmlrpc.php"] [unique_id "ag012F0SQUMi6Qp35P_vdAAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-05-20 03:44:42
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
JM/Jamaica/digijmres-190-95-143-63.digicelbroadband.com
Web App Attack
2026-05-20 02:44:16
(1 month ago)
Attac
Brute-Force
🇳🇱
debestelapp
2026-05-19 20:15:08
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 17:59:43
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelb ...
show more
(mod_security) mod_security (id:240335) triggered by 63.143.95.190 (digijmres-190-95-143-63.digicelbroadband.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:59:38.608192 2026] [security2:error] [pid 22691:tid 22691] [client 63.143.95.190:50025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 63.143.95.190 (+1 hits since last alert)|k2servicesinc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "k2servicesinc.net"] [uri "/xmlrpc.php"] [unique_id "agylCuG9pFzykjnswvBrSQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-05-06 14:20:35
(1 month ago)
🥶 Part of massive botnet scraping campaign that nearly turned into a DDoS on 2025-11-27
DDoS Attack
🇮🇹
A000Z
2026-04-14 00:06:13
(2 months ago)
Fail2Ban: 63.143.95.190 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ...
show more
Fail2Ban: 63.143.95.190 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36
show less
Bad Web Bot
2025-12-14 05:13:25
(6 months ago)
botnet
DDoS Attack
2025-11-25 11:49:45
(7 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-23 09:09:05
(7 months ago)
scanning http requests from known botnet
Web App Attack