🇷🇴
clauss
2026-08-26 00:03:29
(7 hours ago)
IP reached maximum auth failures for a one day block
Brute-Force
🇮🇩
sockominfo
2026-08-25 00:00:53
(1 day ago)
Zimbra: Login failures from malicious IP: 165.99.14.18. Threat Score: 6.4/10 (MEDIUM). Confidence: 4 ...
show more
Zimbra: Login failures from malicious IP: 165.99.14.18. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇵🇾
SecOpsSL
2026-08-24 20:05:15
(1 day ago)
165.99.14.18 - - \[24/Aug/2026:10:02:58 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" ...
show more
165.99.14.18 - - \[24/Aug/2026:10:02:58 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 1
165.99.14.18 - - \[24/Aug/2026:10:23:01 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 1
165.99.14.18 - - \[24/Aug/2026:11:14:14 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0
165.99.14.18 - - \[24/Aug/2026:15:32:16 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0
165.99.14.18 - - \[24/Aug/2026:19:15:58 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0
show less
Hacking
Web App Attack
🇮🇩
xveil
2026-08-24 19:12:53
(1 day ago)
2026-08-25T02:12:50.089340 mail-honeypot postfix/submission/smtpd[31370]: warning: unknown[165.99.14 ...
show more
2026-08-25T02:12:50.089340 mail-honeypot postfix/submission/smtpd[31370]: warning: unknown[165.99.14.18]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
🇪🇸
el-brujo
2026-08-23 21:51:35
(2 days ago)
Cloudflare WAF: Request Path: /profiles/index.php Request Query: ?action=register Host: foro.elhacke ...
show more
Cloudflare WAF: Request Path: /profiles/index.php Request Query: ?action=register Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Action: block Source: firewallCustom ASN Description: LIENVPS TECHNOLOGY COMPANY LIMITED Country: VN Method: GET Timestamp: 2026-08-23T21:51:35Z ruleId: 966a7d5204864934b148d9588ade6bd4. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇮🇩
xveil
2026-08-23 21:10:19
(2 days ago)
2026-08-24T04:10:17.024080 mail-honeypot postfix/submission/smtpd[11795]: warning: unknown[165.99.14 ...
show more
2026-08-24T04:10:17.024080 mail-honeypot postfix/submission/smtpd[11795]: warning: unknown[165.99.14.18]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
🇳🇱
Site.eu
2026-08-23 00:45:18
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
LRob
2026-08-22 10:18:48
(3 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 19:30:55
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 165.99.14.18 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 165.99.14.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 15:30:48.124698 2026] [security2:error] [pid 31256:tid 31256] [client 165.99.14.18:58378] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thevillageartcenter.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thevillageartcenter.com"] [uri "/mailto:[email protected] "] [unique_id "aoinaOsKTSJO2a4wnhR3-QAAABg"], referer: http://thevillageartcenter.com/contact.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇾
SecOpsSL
2026-08-21 17:33:12
(4 days ago)
Aug 21 14:33:11 mail postfix/smtps/smtpd[18295]: warning: unknown[165.99.14.18]: SASL PLAIN authenti ...
show more
Aug 21 14:33:11 mail postfix/smtps/smtpd[18295]: warning: unknown[165.99.14.18]: SASL PLAIN authentication failed: authentication failure
show less
Email Spam
Brute-Force
🇪🇸
el-brujo
2026-08-20 18:41:17
(5 days ago)
Cloudflare WAF: Request Path: /////////////////////desafios_wargames/index.php Request Query: ?actio ...
show more
Cloudflare WAF: Request Path: /////////////////////desafios_wargames/index.php Request Query: ?action=register Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Safari/605.1.15 Action: block Source: firewallCustom ASN Description: LIENVPS TECHNOLOGY COMPANY LIMITED Country: VN Method: GET Timestamp: 2026-08-20T18:41:17Z ruleId: 966a7d5204864934b148d9588ade6bd4. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇨🇿
ptlab
2026-08-20 00:45:36
(6 days ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇬🇧
Joe-Mark
2026-08-19 07:37:01
(1 week ago)
Invalid Failed SMTP Login to Mail Server
Brute-Force
🇿🇦
maximonline.co.za
2026-08-19 03:26:04
(1 week ago)
Brute Force SMTP AUTH Attack
Brute-Force
2026-08-17 10:07:24
(1 week ago)
Authentication failure
Brute-Force