🇺🇸
convos
2026-07-17 18:43:31
(1 week ago)
Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ...
show more
Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403).
show less
Web App Attack
Hacking
Bad Web Bot
2026-07-09 04:59:02
(2 weeks ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/1.1, POST /wp-login.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 13:17:34
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:17:28.351126 2026] [security2:error] [pid 26152:tid 26152] [client 185.132.53.46:48098] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||method1.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "method1.net"] [uri "/wp-json/wp/v2/users"] [unique_id "akuq6L13rHCE_-EJLZicHwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-27 03:05:51
(1 month ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-06-18 14:15:11
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇹🇷
kuru.bbs067
2026-06-18 05:52:54
(1 month ago)
Sign-in and MFA DDoS Attack Detected
Brute-Force
🇩🇪
ger-stg-sifi1
2026-06-14 14:58:18
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
sernate
2026-06-10 00:34:23
(1 month ago)
(XMLRPC) WP XMLPRC Attack 185.132.53.46 (DE/Germany/lain.185.132.53.46.aluy.net): 5 in the last 3600 ...
show more
(XMLRPC) WP XMLPRC Attack 185.132.53.46 (DE/Germany/lain.185.132.53.46.aluy.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
🇩🇪
LRob
2026-05-27 11:30:24
(2 months ago)
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ...
show more
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail
show less
Brute-Force
Web App Attack
🇦🇺
MAGIC
2026-05-16 01:51:53
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇩
sockominfo
2026-05-13 13:00:48
(2 months ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇺🇸
TPI-Abuse
2026-05-09 19:17:10
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 15:17:03.002244 2026] [security2:error] [pid 9602:tid 9618] [client 185.132.53.46:50728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "credit-card-cap.com"] [uri "/.svn/entries"] [unique_id "af-IL5aw1l1AV1izq9B7PwAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
Fn4ticHz
2026-05-09 06:15:28
(2 months ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-05-09 01:10:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.132.53.46 (lain.185.132.53.46.aluy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 21:10:18.928212 2026] [security2:error] [pid 4556:tid 4556] [client 185.132.53.46:36570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamisongreen.com"] [uri "/.git/config"] [unique_id "af6JeiM8m9oiB2guUhPhKAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 04:01:10
(2 months ago)
2026-05-05 19:00:15,384 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
2026-05-0 ...
show more
2026-05-05 19:00:15,384 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
2026-05-05 22:00:13,351 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
2026-05-06 01:00:12,892 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
2026-05-06 04:00:21,106 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
2026-05-06 07:01:08,382 fail2ban.actions [3625835]: NOTICE [tor] Ban 185.132.53.46
show less
Brute-Force