🇩🇪
Vegascosmetics
2026-06-14 17:01:34
(1 week ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after error-handler fuzzing. Vegas Security
Hacking
Exploited Host
Web App Attack
🇩🇪
HandyTreff.de
2026-06-13 03:37:56
(1 week ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.533 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -37.533 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 S
show less
Web App Attack
Bad Web Bot
🇩🇪
Hazzard
2026-04-16 17:36:34
(2 months ago)
(wordpress) Failed wordpress login from 91.90.122.158 (LI/Liechtenstein/Schaan/Schaan/-/[redacted]): ...
show more
(wordpress) Failed wordpress login from 91.90.122.158 (LI/Liechtenstein/Schaan/Schaan/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
HandyTreff.de
2026-04-02 02:21:07
(2 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -32.978 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -32.978 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0
show less
Web App Attack
Bad Web Bot
🇨🇭
Ribeye375
2026-03-25 07:57:26
(2 months ago)
HIPS fake-user-agent - Block tcp/0:65535
Port Scan
Bad Web Bot
🇺🇸
MPL
2026-03-25 07:03:17
(2 months ago)
tcp port scan (6 or more attempts)
Port Scan
2026-03-25 02:30:09
(2 months ago)
Triggered: repeated knocking on closed ports.
Port Scan
🇷🇺
DZBOT
2026-03-25 00:57:46
(2 months ago)
DZBOT: [MTA] NO LOGIN / auth failed
Port Scan
Brute-Force
🇫🇷
sthoyer.de
2026-03-15 02:16:29
(3 months ago)
Mar 15 03:16:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ...
show more
Mar 15 03:16:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=91.90.122.158 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=51917 DPT=8787 WINDOW=65535 RES=0x00 SYN URGP=0
Mar 15 03:16:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=91.90.122.158 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=42440 DPT=6443 WINDOW=65535 RES=0x00 SYN URGP=0
Mar 15 03:16:23 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=91.90.122.158 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=TCP SPT=45044 DPT=4321 WINDOW=65535 RES=0x00 SYN URGP=0
Mar 15 03:16:25 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=91.90.122.158 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=42440 DPT=6443 WINDOW=65535 RES=0x00
...
show less
Port Scan
🇩🇪
stinpriza
2026-03-13 15:55:42
(3 months ago)
Web App Attack
Web App Attack
🇬🇧
OptimusGO
2026-01-24 16:34:37
(4 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-01-24 16:34:27 UTC
Log evidence:
01/24/2026-16:34:14.327241 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 91.90.122.158:57626 -> 185.127.18.66:8443
show less
Port Scan
Brute-Force
🇺🇸
MPL
2026-01-24 16:01:55
(4 months ago)
tcp/9443 (4 or more attempts)
Port Scan
🇺🇸
MPL
2026-01-24 14:32:54
(4 months ago)
tcp port scan (48 or more attempts)
Port Scan
2026-01-19 17:50:49
(5 months ago)
Jan 19 12:50:45 localhost kernel: [97190625.162764] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91 ...
show more
Jan 19 12:50:45 localhost kernel: [97190625.162764] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.90.122.158 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=44 ID=0 PROTO=TCP SPT=49576 DPT=8686 SEQ=4161800600 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 19 12:50:45 localhost kernel: [97190625.168776] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.90.122.158 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=44 ID=0 PROTO=TCP SPT=48537 DPT=8180 SEQ=3585285831 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 19 12:50:48 localhost kernel: [97190628.977787] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.90.122.158 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=44 ID=0 PROTO=TCP SPT=49576 DPT=8686 WINDOW=65535 RES=0x00 SYN URGP=0
Jan 19 12:50:48 localhost kernel: [97190628.977792] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=91.90.122.158 DST=[mungedIP2] LEN=40
show less
Port Scan
🇫🇷
security.rdmc.fr
2025-12-20 03:04:07
(6 months ago)
Port Scan Attack proto:TCP src:28845 dst:873
Port Scan