๐ฉ๐ช
LRob
2026-11-02 10:32:50
(1 day ago)
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-agent/commits/commit/96c54a632dd006ff186cc5194020abcaece112d3/CONTRIBUTING.md | src_port: 34715 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ...
show more
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-agent/commits/commit/96c54a632dd006ff186cc5194020abcaece112d3/CONTRIBUTING.md | src_port: 34715 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36
show less
DDoS Attack
Bad Web Bot
๐ฎ๐น
mgarofano80
2026-10-27 18:00:36
(1 week ago)
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-26 09:18:39
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (63, Abuse: 57)
Hacking
Exploited Host
Web App Attack
๐ฉ๐ช
Marc
2026-10-26 08:58:48
(1 week ago)
144.124.199.151 - - [26/Oct/2026:09:58:47 +0100] "GET /wp-json/wp/v2/comments?per_page=100&page=1&_fields=author_name,author_url HTTP/2.0" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 ...
show more
144.124.199.151 - - [26/Oct/2026:09:58:47 +0100] "GET /wp-json/wp/v2/comments?per_page=100&page=1&_fields=author_name,author_url HTTP/2.0" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 144.124.199.151 - - [26/Oct/2026:09:58:47 +0100] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 144.124.199.151 - - [26/Oct/2026:09:58:48 +0100] "GET /wp-sitemap-users-1.xml HTTP/2.0" 404 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Brute-Force
๐ธ๐ช
eagle
2026-10-22 06:09:24
(1 week ago)
144.124.199.151 - - [22/Oct/2026:06:09:23 +0000] "POST / HTTP/1.1" 404 555 "-" "-" "[server]"
...
Bad Web Bot
Web App Attack
๐ท๐ด
abuse_IP_reporter
2026-10-09 13:45:02
(3 weeks ago)
Oct 9 15:51:32 server UFW BLOCK SRC=144.124.199.151 DF PROTO=TCP SPT=55306
Port Scan
๐ท๐ธ
Scan
2026-10-05 03:04:55
(4 weeks ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
๐จ๐ญ
m_vlasov
2026-10-04 23:01:35
(4 weeks ago)
SSH/Telnet honeypot: 0 login attempts, 2 sessions, 0 shell commands.
Port Scan
IoT Targeted
๐บ๐ธ
TPI-Abuse
2026-10-04 09:04:10
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 144.124.199.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 05:04:03.826965 2026] [security2:error] [pid 1853:tid 1865] [client 144.124.199.151:3000] ...
show more
(mod_security) mod_security (id:210350) triggered by 144.124.199.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 05:04:03.826965 2026] [security2:error] [pid 1853:tid 1865] [client 144.124.199.151:3000] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newyorklifecoach.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newyorklifecoach.com"] [uri "/"] [unique_id "asIWgyRNNqBLwHwFcrvCzwAAAAk"], referer: https://backlinkreports.shop/dir/organic-link-building-147664
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ฐ
powerhostingdk
2026-10-02 06:55:43
(1 month ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-01 20:34:52
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 144.124.199.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:34:48.329091 2026] [security2:error] [pid 6051:tid 6051] [client 144.124.199.151:56385] ...
show more
(mod_security) mod_security (id:210350) triggered by 144.124.199.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:34:48.329091 2026] [security2:error] [pid 6051:tid 6051] [client 144.124.199.151:56385] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||carbtestingidaho.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "carbtestingidaho.com"] [uri "/"] [unique_id "ar7D6BGIZsI2YNNLz7uz2AAAAAM"], referer: https://makebacklinksfree.website/dir/premium-backlink-building-33967
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
soverin
2026-09-30 18:45:03
(1 month ago)
spam
Email Spam
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-30 13:20:22
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-28 23:58:19
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-27 09:06:33
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
