🇨🇿
lp
2026-06-19 07:50:58
(11 hours ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-19T09:26:37+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-19T09:26:37+02:00 vpn Access-Reject 'jwillingham' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
shab
2026-06-18 16:26:15
(1 day ago)
Suspicious VPN activity
Brute-Force
🇨🇿
lp
2026-06-18 09:22:31
(1 day ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-18T11:11:00+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-18T11:11:00+02:00 vpn Access-Reject 'ryank' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
Admins@FBN
2026-06-17 02:35:10
(2 days ago)
VPN Logon Failed: AAA user authentication Rejected user = <wecunningham>
Brute-Force
Exploited Host
🇨🇿
lp
2026-06-17 01:51:19
(2 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-17T02:50:41+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 191.102.159.184
2026-06-17T02:50:41+02:00 vpn Access-Reject 'jkosiek' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-06-11 16:51:35
(1 week ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-11T11:22:30+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-11T11:22:30+02:00 vpn Access-Reject 'smitche' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-06-11T17:23:19+02:00 vpn Access-Reject 'wmckoy' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-06-02 04:51:30
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-02T05:46:05+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-02T05:46:05+02:00 vpn Access-Reject 'kbobek' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-06-02T06:10:33+02:00 vpn Access-Reject 'lisan' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-06-01 15:22:41
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-01T05:19:19+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-06-01T05:19:19+02:00 vpn Access-Reject 'gfornelli' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-06-01T17:02:48+02:00 vpn Access-Reject 'cwest' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-05-31 04:51:56
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-31T01:30:59+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-31T01:30:59+02:00 vpn Access-Reject 'billt' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-05-31T05:35:51+02:00 vpn Access-Reject 'zdwilliams' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-05-30 04:51:54
(2 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-30T01:41:29+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-30T01:41:29+02:00 vpn Access-Reject 'kfiola' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-05-30T05:36:34+02:00 vpn Access-Reject 'shollis' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-05-28 21:23:33
(3 weeks ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-28T15:16:57+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 191.102.159.184
2026-05-28T15:16:57+02:00 vpn Access-Reject 'wellis' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-05-28T22:37:22+02:00 vpn Access-Reject 'nabrownlee' station: 191.102.159.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
MichelAngel SecPhish
2026-01-21 10:43:06
(4 months ago)
Credential stuffing detected: 48 failed login attempts targeting 16 unique usernames. Location: US, ...
show more
Credential stuffing detected: 48 failed login attempts targeting 16 unique usernames. Location: US, ASN: –. Status: Suspicious
show less
Hacking
🇨🇦
wil.com
2026-01-03 16:52:20
(5 months ago)
GlobalProtect login attempts with user rhanson.
VPN IP
Brute-Force
2026-01-03 08:08:34
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-01-02 04:25:54
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 191.102.159.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 191.102.159.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 23:25:50.055506 2026] [security2:error] [pid 6121:tid 6121] [client 191.102.159.184:33438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rcrgalicia.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rcrgalicia.com"] [uri "/mailto:[email protected] "] [unique_id "aVdIzpiU-KQhlj9Uix0jrAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack