🇬🇧
PeravixGroup
2026-05-16 05:59:52
(2 weeks ago)
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ...
show more
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
show less
IoT Targeted
Brute-Force
2026-05-15 23:50:45
(2 weeks ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
🇺🇸
MPL
2026-05-15 19:26:58
(2 weeks ago)
tcp/23 (2 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2026-02-28 14:58:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 09:58:09.945381 2026] [security2:error] [pid 2769:tid 2769] [client 93.115.7.93:43853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mapleleaf-marketing.com"] [uri "/bak/sftp-config.json"] [unique_id "aaMCgc8ImNaDBFCO5rOeNgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-25 02:43:56
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 21:43:46.389450 2026] [security2:error] [pid 12229:tid 12229] [client 93.115.7.93:61431] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wendeenicole.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wendeenicole.com"] [uri "/bak/www.sql"] [unique_id "aZ5h4p2KhzGYOSJXsU95KwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
gnom4ik
2026-02-21 22:22:46
(3 months ago)
ban-reviewer auto report; ip=93.115.7.93; scenario=http:scan; verdict=valid_ban; confidence=0.85; ca ...
show more
ban-reviewer auto report; ip=93.115.7.93; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'Port Scan' (category 14) and 'Hacking' (category 15) in abuseipdb_context; Decision was made for 'http:scan' scenario indicating scanning activity; IP has high number of active decisions (ip_active_decisions_total: 1) within lookback window
show less
Port Scan
Hacking
Brute-Force
🇳🇿
Antinson
2026-02-20 04:57:04
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
ConsulHosting
2026-02-20 04:01:00
(3 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
consul.to
2026-02-20 03:51:43
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
zynex
2026-02-20 03:10:41
(3 months ago)
URL Probing: /zwso.php
Web App Attack
🇨🇭
Origon
2026-02-20 02:50:50
(3 months ago)
http-probing - IP: 93.115.7.93 - time="2026-02-20T03:50:50+01:00" level=info msg="(555f66b4f6a74558 ...
show more
http-probing - IP: 93.115.7.93 - time="2026-02-20T03:50:50+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 93.115.7.93 (RO/9009) : 4h ban on Ip 93.115.7.93" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 22:07:23
(3 months ago)
(mod_security) mod_security (id:240000) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 ...
show more
(mod_security) mod_security (id:240000) triggered by 93.115.7.93 (mx-pool93.top10offerstoday.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 17:07:19.554633 2026] [security2:error] [pid 18837:tid 18837] [client 93.115.7.93:41367] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||platinumautobrokers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "platinumautobrokers.com"] [uri "/images/stories/themes.php"] [unique_id "aZeJl-zwDOvDllnDSwHSyQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-02-17 18:03:58
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇫🇷
dynamix
2026-02-17 17:00:52
(3 months ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-02-17 16:56:06
(3 months ago)
Web attack/malicious scanning detected
Web App Attack