2026-11-08 16:33:30
UTC ·
(5 days ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇩🇪
4server
2026-10-10 07:46:02
UTC ·
(1 month ago)
[SatOct1009:45:49.0291092026][security2:error][pid793718:tid793766][client122.52.243.68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"securityscan\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents ...
show more
[SatOct1009:45:49.0291092026][security2:error][pid793718:tid793766][client122.52.243.68:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"securityscan\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"290\"][id\"330101\"][rev\"1\"][msg\"Atomicorp.comWAFRules:scriptinjectionUserAgentString\"][severity\"CRITICAL\"][hostname\"ecosuber.com\"][uri\"/wp-json/batch/v1\"][unique_id\"asntLfR6CvpxB7ix89_7jAAAAYQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇮🇩
sockominfo
2026-09-17 22:00:53
UTC ·
(1 month ago)
Email: Login failures from Bad Reputation IP: 122.52.243.68. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ...
show more
Email: Login failures from Bad Reputation IP: 122.52.243.68. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-09-17 21:00:14
UTC ·
(1 month ago)
Email: Login failures from Bad Reputation IP: 122.52.243.68. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking
Web App Attack
🇺🇸
xxkodedxx
2026-09-03 10:32:39
UTC ·
(2 months ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 10:32:00→10:32:01 UTC
Volume: 2 honeypot probe(s)
Bait taken: /wp-login.php
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 10:32:00→10:32:01 UTC
Volume: 2 honeypot probe(s)
Bait taken: /wp-login.php
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
palzer.IT
2026-09-02 15:35:00
UTC ·
(2 months ago)
Fail2ban automatic report for apache-wp-scan: 122.52.243.68 - - [02/Sep/2026:17:34:46 +0200] GET /wp-login.php [DOMAIN_REMOVED] 200 9306 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0. ...
show more
Fail2ban automatic report for apache-wp-scan: 122.52.243.68 - - [02/Sep/2026:17:34:46 +0200] GET /wp-login.php [DOMAIN_REMOVED] 200 9306 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-01-08 05:52:18
UTC ·
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 122.52.243.68
2026-01-08T06:36:06+01:00 vpn Access-Reject 'plivami' station: 122.52.243.68 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 122.52.243.68
2026-01-08T06:36:06+01:00 vpn Access-Reject 'plivami' station: 122.52.243.68 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>'
show less
Brute-Force
Web App Attack
2026-01-07 20:04:04
UTC ·
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.07 is noted in report timestamp
Hacking
Brute-Force
🇨🇿
lp
2026-01-07 04:25:26
UTC ·
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 122.52.243.68
2026-01-07T03:53:04+01:00 vpn Access-Reject 'ludmila.mlynkova' station: 122.52.243.68 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_p ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 122.52.243.68
2026-01-07T03:53:04+01:00 vpn Access-Reject 'ludmila.mlynkova' station: 122.52.243.68 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>'
show less
Brute-Force
Web App Attack
2026-01-04 23:14:12
UTC ·
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.04 is noted in report timestamp
Hacking
Brute-Force
🇪🇸
librebit
2025-12-31 12:48:10
UTC ·
(10 months ago)
RDWeb scan
Web App Attack
2025-12-21 08:51:27
UTC ·
(10 months ago)
Attempted brute force login to web vpn 3 time(s); last attempt for 2025.12.21 is noted in report timestamp
Hacking
Brute-Force
2025-12-19 13:03:50
UTC ·
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.19 is noted in report timestamp
Hacking
Brute-Force
🇹🇷
rtbh.com.tr
2025-11-03 20:09:43
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-11-03 00:09:41
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
