🇬🇧
thetomtaylor.co.uk
2026-10-15 11:08:02
(18 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
lenz
2026-10-15 10:12:01
(19 hours ago)
Oct 15 12:04:00 hosting wordpress(grupa-ddd.pl)[1114]: Authentication failure for admin from 170.64. ...
show more
Oct 15 12:04:00 hosting wordpress(grupa-ddd.pl)[1114]: Authentication failure for admin from 170.64.155.71
Oct 15 12:05:40 hosting wordpress(grupa-ddd.pl)[8083]: Authentication failure for admin from 170.64.155.71
Oct 15 12:07:11 hosting wordpress(grupa-ddd.pl)[1119]: Authentication failure for admin from 170.64.155.71
Oct 15 12:09:04 hosting wordpress(grupa-ddd.pl)[2824]: Authentication failure for admin from 170.64.155.71
Oct 15 12:12:01 hosting wordpress(grupa-ddd.pl)[1121]: Authentication failure for admin from 170.64.155.71
...
show less
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-10-15 10:10:04
(19 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-15 10:07:02
(19 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-10-15 09:57:41
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 2 hits.
show less
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-15 09:28:37
(19 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: metrics.astropot.online | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-10-15 09:27:44
(19 hours ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇫🇷
Felisse
2026-09-01 14:24:53
(1 month ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 3h57m56s)
Port Scan
🇳🇱
homeshowdomain.nl
2025-10-20 21:59:42
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-10-19.
show less
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-10-19 06:14:31
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 02:14:23.875866 2025] [security2:error] [pid 21099:tid 21099] [client 170.64.155.71:38484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1writeforthegrant.com"] [uri "/.git/config"] [unique_id "aPSBv3nk3Ckqc64RSdHOsQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-19 05:23:41
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 01:23:36.433097 2025] [security2:error] [pid 24210:tid 24210] [client 170.64.155.71:39608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "389thbg.com"] [uri "/.git/config"] [unique_id "aPR12KkujxU4stLRmLaCsAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-19 00:50:07
(11 months ago)
Restricted File Access Requests
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-10-18 22:27:26
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 18:27:18.308500 2025] [security2:error] [pid 28172:tid 28172] [client 170.64.155.71:36358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3-6trucking.com"] [uri "/.git/config"] [unique_id "aPQURqD8HwanAd9FP93MyQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-18 21:01:25
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 17:01:19.229347 2025] [security2:error] [pid 23149:tid 23149] [client 170.64.155.71:58964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "15tobefit.com"] [uri "/.git/config"] [unique_id "aPQAH8aAl8o4ERggNZjQvwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-18 20:20:21
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.155.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 18 16:20:18.059389 2025] [security2:error] [pid 12015:tid 12015] [client 170.64.155.71:35686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1800glass.com"] [uri "/.git/config"] [unique_id "aPP2gpdheCUnwOhdTZQVHgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
