🇹🇷
SeczarSecureOps
2026-09-15 12:37:17
(20 hours ago)
Auto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (10 events in 10min) at 2026-09- ...
show more
Auto-blocked by Seczar SecureOps — WAF — SQL Injection Attack Burst (10 events in 10min) at 2026-09-15 12:37
show less
Web App Attack
🇸🇪
shab
2026-09-02 21:34:37
(1 week ago)
Repeated VPN Brute Force
Brute-Force
🇺🇸
drewf.ink
2026-09-02 07:30:03
(2 weeks ago)
[07:30] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[07:30] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇺🇸
drewf.ink
2026-08-30 03:57:34
(2 weeks ago)
[03:57] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[03:57] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇺🇸
drewf.ink
2026-08-29 15:45:26
(2 weeks ago)
[15:45] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[15:45] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-06 10:23:34
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 06:23:27.049420 2026] [security2:error] [pid 11529:tid 11529] [client 65.111.22.3:14139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scrunchiebuttbikinis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scrunchiebuttbikinis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anRgn2XBPBaf7V_nllNyBAAAAAs"], referer: https://t.co/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-08-05 12:56:03
(1 month ago)
Wordfence waf block on fypeducation
Web App Attack
🇩🇪
Tha_14
2026-08-04 17:10:45
(1 month ago)
Attempt to log in with prohibited username: admin
Web App Attack
🇳🇱
Savvii
2026-07-11 18:12:07
(2 months ago)
10 attempts against mh_ha-misc-ban on bud
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 02:46:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:46:30.062453 2026] [security2:error] [pid 1169720:tid 1169720] [client 65.111.22.3:11147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsndetx.com"] [uri "/new/.git/config"] [unique_id "aY0_BjujXYZOQJIP-ii--AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 21:11:27
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 16:11:22.453117 2026] [security2:error] [pid 26263:tid 26263] [client 65.111.22.3:41523] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "area52designs.com"] [uri "/api/.git/config"] [unique_id "aYzwelvdF1vqiPzqTtih4QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 22:10:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 17:10:06.818538 2026] [security2:error] [pid 4836:tid 4836] [client 65.111.22.3:22489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appalachianstomp.com"] [uri "/admin/.git/config"] [unique_id "aYusvp6ogoJnHG_8I0k3GgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:55:45
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:55:38.532692 2026] [security2:error] [pid 27103:tid 27103] [client 65.111.22.3:58319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kofcasamblea442.org"] [uri "/new/.git/config"] [unique_id "aYrIWvz_JUOJiaqWFmrZXQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-02-10 02:55:26
(7 months ago)
2026-02-10 03:55:26 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:55:24
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:55:15.628207 2026] [security2:error] [pid 6181:tid 6181] [client 65.111.22.3:64369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingfishbets.com"] [uri "/.env.production"] [unique_id "aYqeE-9fcUs5Db8SwmG32wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack