🇫🇷
Sklurk
2026-07-09 00:00:24
(1 month ago)
Web App Attack
Web App Attack
2026-03-24 06:45:05
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
agenciahypelab.com.br
2026-03-05 19:25:43
(5 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇬🇧
relianoid.com
2026-03-03 22:19:36
(5 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-01-05 05:58:34
(7 months ago)
Botnet activity detected: Mixed vertical+horizontal scanner, Horizontal scanner on non-service ports ...
show more
Botnet activity detected: Mixed vertical+horizontal scanner, Horizontal scanner on non-service ports, Coordinated non-service scan, Slow horizontal with regular pattern, Confirmed scanner identified, Horizontal scan with SYN retry, Horizontal with multiple indicators, Wide horizontal scanner, Multiple non-service patterns, Confirmed scanner with multiple patterns (+2 more). Total 118 blocks.
show less
DDoS Attack
Port Scan
Hacking
🇮🇹
VHosting
2025-12-23 15:00:21
(8 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇮🇩
Kencang.ID
2025-12-15 17:02:25
(8 months ago)
Failed Login Attempt 2025-12-15 17:02:25 | 65.111.0.31 | Desktop | Safari | Ashburn, Virginia, Unite ...
show more
Failed Login Attempt 2025-12-15 17:02:25 | 65.111.0.31 | Desktop | Safari | Ashburn, Virginia, United States | 3xK Tech GmbH | Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15
show less
FTP Brute-Force
Brute-Force
🇺🇸
kosada.com
2025-12-11 02:59:27
(8 months ago)
Web password guessing
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-11-30 13:09:55
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-11-28 10:50:44
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 05:50:36.986094 2025] [security2:error] [pid 2669784:tid 2669797] [client 65.111.0.31:53081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alzooma.com"] [uri "/.env.local"] [unique_id "aSl-fBB280fgPat0mUOilAAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:26:31
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:26:26.090286 2025] [security2:error] [pid 966113:tid 966113] [client 65.111.0.31:45379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.meritfloorstx.com"] [uri "/.svn/wc.db"] [unique_id "aSVaInkM3VhR2JkUlk8h6QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:42:55
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:42:50.107256 2025] [security2:error] [pid 12290:tid 12290] [client 65.111.0.31:52773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.puckerbikini.com"] [uri "/.git/HEAD"] [unique_id "aSVP6lbFhepYGthfPG9-MgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:15:00
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:14:53.399357 2025] [security2:error] [pid 21779:tid 21779] [client 65.111.0.31:37035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastsidecellostudio.com"] [uri "/.env"] [unique_id "aSU7TUd01vDoDQzJEdM8CAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2025-10-31 21:15:22
(10 months ago)
(From [email protected] ) Hello,
I’m Chip Hastie from Clark Group. We’re ...
show more
(From [email protected] ) Hello,
I’m Chip Hastie from Clark Group. We’re in the process of selecting key partners for an upcoming development initiative and are reaching out to explore potential collaboration with your team.
Your capabilities align well with the scope of work we’re preparing, and we believe this project could present a strong mutual opportunity. If you’re open to new engagements, I’d be pleased to share the complete project scope and specifications for your review.
I look forward to your response and the possibility of working together.
Warm regards,
Chip Hastie
Clark Construction
show less
Phishing
Web Spam
🇨🇦
wil.com
2025-10-29 03:08:43
(10 months ago)
GlobalProtect login attempts with user lkdower.
VPN IP
Brute-Force
