๐บ๐ธ
xxkodedxx
2026-07-09 07:06:54
(2 days ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1ร honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1ร honeypot-get in 10m window.
Active: 07:06:05โ07:06:06 UTC
Volume: 2 honeypot probe(s)
Bait taken: /wp-login.php, /wp-admin/install.php?step=1
UA: "http://zvxlabs.com/wp-admin/install.php?step=1"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-07 01:33:52
(4 days ago)
suricata IPS/IDS detection, ruleset ET SCAN Bing Webcrawler User-Agent (BingBot)
Port Scan
๐ฎ๐ฉ
gonet.home
2026-06-29 00:00:14
(1 week ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-06-27 00:07:10
(2 weeks ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
๐ฉ๐ช
wiredalter
2026-06-25 22:37:30
(2 weeks ago)
Blocked by UFW on dVPS [8443/tcp]
Source Port: 9227
TTL: 55
Packet Length: 60
TOS: 0x00
Analyzed by ...
show more
Blocked by UFW on dVPS [8443/tcp]
Source Port: 9227
TTL: 55
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
show less
Port Scan
Brute-Force
๐ฎ๐ฉ
gonet.home
2026-06-24 01:25:32
(2 weeks ago)
Security Event Detected by SOC Gonet: event=alert, hits=1
Brute-Force
Anonymous
2026-06-03 07:40:29
(1 month ago)
[Wed Jun 03 09:40:27.624553 2026] [authz_core:error] [pid 26455] [client 162.159.113.43:11288] AH016 ...
show more
[Wed Jun 03 09:40:27.624553 2026] [authz_core:error] [pid 26455] [client 162.159.113.43:11288] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Jun 03 09:40:28.030418 2026] [authz_core:error] [pid 26455] [client 162.159.113.43:11288] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Wed Jun 03 09:40:28.525847 2026] [authz_core:error] [pid 26455] [client 162.159.113.43:11288] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ณ๐ฑ
wolfemium
2026-05-27 23:07:17
(1 month ago)
162.159.113.43 - - [28/May/2026:02:07:15 +0300] "GET /lock360.php HTTP/1.1" 502 150 "-" "-"
162.159. ...
show more
162.159.113.43 - - [28/May/2026:02:07:15 +0300] "GET /lock360.php HTTP/1.1" 502 150 "-" "-"
162.159.113.43 - - [28/May/2026:02:07:16 +0300] "GET /gfile.php HTTP/1.1" 502 150 "-" "-"
162.159.113.43 - - [28/May/2026:02:07:16 +0300] "GET /k.php HTTP/1.1" 502 150 "-" "-"
162.159.113.43 - - [28/May/2026:02:07:16 +0300] "GET /m.php HTTP/1.1" 502 150 "-" "-"
162.159.113.43 - - [28/May/2026:02:07:16 +0300] "GET /lock6.php HTTP/1.1" 502 150 "-" "-"
162.159.113.43 - - [28/May/2026:02:07:16 +0300] "GET /NewFile.php HTTP/1.1" 502 150 "-" "-"
...
show less
DDoS Attack
Anonymous
2026-05-23 20:59:55
(1 month ago)
[Sat May 23 22:59:52.946626 2026] [authz_core:error] [pid 15427] [client 162.159.113.43:10525] AH016 ...
show more
[Sat May 23 22:59:52.946626 2026] [authz_core:error] [pid 15427] [client 162.159.113.43:10525] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 22:59:53.903910 2026] [authz_core:error] [pid 15427] [client 162.159.113.43:10525] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 22:59:54.021360 2026] [authz_core:error] [pid 15427] [client 162.159.113.43:10525] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-23 01:59:18
(1 month ago)
[Sat May 23 03:59:17.345421 2026] [authz_core:error] [pid 19312] [client 162.159.113.43:10145] AH016 ...
show more
[Sat May 23 03:59:17.345421 2026] [authz_core:error] [pid 19312] [client 162.159.113.43:10145] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 03:59:17.364716 2026] [authz_core:error] [pid 19312] [client 162.159.113.43:10145] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 23 03:59:17.403635 2026] [authz_core:error] [pid 19312] [client 162.159.113.43:10145] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-12 05:40:24
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-05-09 22:53:22
(2 months ago)
162.159.113.43 - - [10/May/2026:00:53:22 +0200] "GET /?url=http://169.254.169.254/latest/meta-data/i ...
show more
162.159.113.43 - - [10/May/2026:00:53:22 +0200] "GET /?url=http://169.254.169.254/latest/meta-data/iam/security-credentials/ HTTP/1.1" 403 202
162.159.113.43 - - [10/May/2026:00:53:22 +0200] "GET /?redirect=http://169.254.169.254/latest/meta-data/iam/security-credentials/ HTTP/1.1" 403 202
...
show less
Hacking
Anonymous
2026-05-09 19:44:34
(2 months ago)
[Sat May 09 21:44:32.793174 2026] [authz_core:error] [pid 23004] [client 162.159.113.43:12242] AH016 ...
show more
[Sat May 09 21:44:32.793174 2026] [authz_core:error] [pid 23004] [client 162.159.113.43:12242] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 09 21:44:32.898136 2026] [authz_core:error] [pid 23004] [client 162.159.113.43:12242] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 09 21:44:34.130100 2026] [authz_core:error] [pid 23004] [client 162.159.113.43:12242] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-05-07 10:48:40
(2 months ago)
[Thu May 07 12:48:39.121653 2026] [authz_core:error] [pid 3621] [client 162.159.113.43:13630] AH0163 ...
show more
[Thu May 07 12:48:39.121653 2026] [authz_core:error] [pid 3621] [client 162.159.113.43:13630] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 07 12:48:39.145421 2026] [authz_core:error] [pid 3621] [client 162.159.113.43:13630] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu May 07 12:48:39.168670 2026] [authz_core:error] [pid 3621] [client 162.159.113.43:13630] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฉ๐ช
wiredalter
2026-04-26 23:30:10
(2 months ago)
Blocked by UFW on dVPS [8443/tcp]
Source Port: 12899
TTL: 55
Packet Length: 60
TOS: 0x00
Analyzed b ...
show more
Blocked by UFW on dVPS [8443/tcp]
Source Port: 12899
TTL: 55
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
show less
Port Scan
Brute-Force