🇩🇪
NxtGenIT
2026-09-10 10:13:34
(4 weeks ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 13:42:58
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 03:21:39
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-03 00:26:45
(1 month ago)
WordPress login attempt
Brute-Force
2026-08-31 20:32:45
(1 month ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show more
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-20 18:00:17
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
kosada.com
2026-08-18 20:17:02
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-18 00:30:35
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 20:30:30.050545 2026] [security2:error] [pid 22463:tid 22463] [client 193.202.87.194:13179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||skyesongtollers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "skyesongtollers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoOnpr_zX2fPb1QQSA_TGwAAACs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
C C
2026-08-07 22:24:49
(2 months ago)
Distributed scraping attack: 3436 req from 3224 rotating proxy IPs, waves of up to 156 req in 138s o ...
show more
Distributed scraping attack: 3436 req from 3224 rotating proxy IPs, waves of up to 156 req in 138s on a single URL | this IP: 1 req, 1 blocked
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-04 18:42:52
(2 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-07-24 13:58:51
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.194 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:58:46.656780 2026] [security2:error] [pid 15068:tid 15068] [client 193.202.87.194:33439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||callahan-co.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "callahan-co.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amNvltiilnN7aYVnztfkGQAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-08 12:41:28
(3 months ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-29 09:16:04
(3 months ago)
Fail2Ban banned 193.202.87.194 for security violations in jail wp-armour. Log: 2026/06/29 09:16:03 [ ...
show more
Fail2Ban banned 193.202.87.194 for security violations in jail wp-armour. Log: 2026/06/29 09:16:03 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.202.87.194 | Target: wplogin" , client: 193.202.87.194, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 19:32:10
(3 months ago)
Fail2Ban banned 193.202.87.194 for security violations in jail wp-armour. Log: 2026/06/27 19:32:10 [ ...
show more
Fail2Ban banned 193.202.87.194 for security violations in jail wp-armour. Log: 2026/06/27 19:32:10 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.202.87.194 | Target: wplogin" , client: 193.202.87.194, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TRoden
2026-06-12 16:20:38
(3 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
