2025-08-29 03:40:15
UTC ·
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇬🇧
webnestify
2025-08-29 01:34:39
UTC ·
(1 year ago)
[Webnestify Honeypot - UK] Unauthorized connection attempt on port 2222.
Port Scan
Hacking
Brute-Force
🇳🇱
Site.eu
2025-08-29 00:49:38
UTC ·
(1 year ago)
Excessive 404/403 errors
Brute-Force
🇸🇬
pusathosting.com
2025-08-28 22:50:04
UTC ·
(1 year ago)
2ds22 bruteforce
Brute-Force
Web App Attack
🇯🇵
mkaraki
2025-08-28 03:42:22
UTC ·
(1 year ago)
1756352536 # Service_probe # SIGNATURE_SEND # source_ip:62.93.167.67 # dst_port:54720
...
Port Scan
🇩🇪
ps-center
2025-08-27 11:57:13
UTC ·
(1 year ago)
C1: Web Attack GET /admin.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
2025-08-27 01:15:05
UTC ·
(1 year ago)
suspicious request in access.log
Web App Attack
2025-08-26 20:45:57
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2025-08-26 19:58:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 15:58:19.687737 2025] [security2:error] [pid 20997:tid 20997] [client 62.93.167.67:38628] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 15:58:19.687737 2025] [security2:error] [pid 20997:tid 20997] [client 62.93.167.67:38628] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||carolynedds.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "carolynedds.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "aK4R2xILWIQKH3IBVeTxPgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-26 12:14:07
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-08-26 08:29:07
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 04:29:00.276164 2025] [security2:error] [pid 15737:tid 15737] [client 62.93.167.67:60114] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 04:29:00.276164 2025] [security2:error] [pid 15737:tid 15737] [client 62.93.167.67:60114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||michaelmazzola.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelmazzola.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "aK1wTCyoy7VV3P1fu0XC_AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-08-26 07:05:23
UTC ·
(1 year ago)
Scanning/Probing (19)
Request Overload (517)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-26 06:02:18
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 02:02:12.579555 2025] [security2:error] [pid 14533:tid 14559] [client 62.93.167.67:34070] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 02:02:12.579555 2025] [security2:error] [pid 14533:tid 14559] [client 62.93.167.67:34070] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tobiume-shounika.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tobiume-shounika.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "aK1N5IFWIhUnEleitjIluAAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-26 06:01:19
UTC ·
(1 year ago)
62.93.167.67 - - [26/Aug/2025:08:00:42 +0200] "GET /manager.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
62.93.167.67 - - [26/Aug/2025:08:00:42 +0200] "GET /bless.php HTTP/1.1" 404 449 "-" "Mozilla/5. ...
show more
62.93.167.67 - - [26/Aug/2025:08:00:42 +0200] "GET /manager.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
62.93.167.67 - - [26/Aug/2025:08:00:42 +0200] "GET /bless.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
62.93.167.67 - - [26/Aug/2025:08:00:42 +0200] "GET /lock360.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
62.93.167.67 - - [26/Aug/2025:08:00:43 +0200] "GET /zwso.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
62.93.167.67 - - [26/Aug/2025:08:00:43 +0200] "GET /chosen.php HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
62.93.167.67 - - [26/Aug/2025:08:00:43 +0200] "GET /about.php HTTP/1.1" 404 449 "-" "Mozi
...
show less
DDoS Attack
🇺🇸
TPI-Abuse
2025-08-26 05:42:41
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 01:42:34.451768 2025] [security2:error] [pid 29630:tid 29630] [client 62.93.167.67:40498] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 62.93.167.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 01:42:34.451768 2025] [security2:error] [pid 29630:tid 29630] [client 62.93.167.67:40498] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||shelbynash.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shelbynash.com"] [uri "/wp-content/plugins/erinyani/asasx.php.bak"] [unique_id "aK1JSjB5RrR1i06RFvaPFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
