🇩🇪
Ilop
2026-10-09 22:30:09
(1 day ago)
[hp-100] 19 unsolicited packets to honeypot ports 5555 (OCI DShield sensor)
Port Scan
🇬🇧
consul.to
2026-10-08 05:10:32
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-10-01 23:25:43
(1 week ago)
Multiple WAF Violations
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(4 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
(4 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
librebit
2026-06-21 02:59:46
(3 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-06-19 16:02:43
(3 months ago)
Brute force
Brute-Force
🇺🇸
nationaleventpros.com
2026-06-14 22:59:12
(3 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 22:01:20
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 18:01:14.908266 2026] [security2:error] [pid 25609:tid 25609] [client 193.202.8.239:52025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sahinozalit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sahinozalit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahoMqnUjbsoqSQf-pSLQWAAAABw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-24 12:38:17
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 08:38:10.976306 2026] [security2:error] [pid 26783:tid 26783] [client 193.202.8.239:51855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||garysgates.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "garysgates.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahLxMu1dYbxiKQ0dYjowkwAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 13:56:20
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 09:56:15.194324 2026] [security2:error] [pid 11210:tid 11210] [client 193.202.8.239:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aslanhan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aslanhan.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af3rf28-11uM5ifexZ_hgAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-28 05:54:08
(8 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-03-01 10:25:57
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.202.8.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 01 05:25:52.692746 2025] [security2:error] [pid 1091:tid 1091] [client 193.202.8.239:50559] [client 193.202.8.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electricmeatgrinder.com.cajunfriedturkey.com"] [uri "/.env"] [unique_id "Z8LgsB_nzPwayVw2_uHuBAAAAAc"], referer: https://tasamm.com/about/eee21.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2024-02-29 05:41:20
(2 years ago)
Credential Stuffing
Brute-Force
🇵🇱
rafix
2023-11-01 00:29:55
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
