2026-09-20 11:42:39
(2 days ago)
2026-09-20T13:42:39.551516+02:00 polaris wp(sahpa.co.za)[113929]: Blocked authentication attempt for ...
show more
2026-09-20T13:42:39.551516+02:00 polaris wp(sahpa.co.za)[113929]: Blocked authentication attempt for [email protected] from 65.111.24.247
...
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-19 16:49:55
(2 days ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 65.111.24.247
2026-09-19T18:20:03+02: ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 65.111.24.247
2026-09-19T18:20:03+02:00 vpn Access-Reject 'janainanote' station: 65.111.24.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-19T18:21:54+02:00 vpn Access-Reject 'andrijana' station: 65.111.24.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-19T18:23:38+02:00 vpn Access-Reject 'monitoreo' station: 65.111.24.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-19T18:25:23+02:00 vpn Access-Reject 'infectologo' station: 65.111.24.247 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
MusicLibrary
2026-09-15 17:48:43
(6 days ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
🇩🇪
www.Examensfragen.de
2026-09-13 22:03:08
(1 week ago)
Web Spam
Bad Web Bot
🇨🇭
backslash
2026-09-12 03:30:07
(1 week ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇺🇸
drewf.ink
2026-09-04 11:47:44
(2 weeks ago)
[11:47] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[11:47] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇫🇷
Sklurk
2026-08-03 02:48:40
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-02 00:44:18
(1 month ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-07-08 03:12:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
Sklurk
2026-07-08 00:05:44
(2 months ago)
Web App Attack
Web App Attack
🇳🇱
Savvii
2026-04-03 09:32:59
(5 months ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 22:20:07
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:20:02.106781 2025] [security2:error] [pid 4562:tid 4562] [client 65.111.24.247:54195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indyham.com"] [uri "/.svn/wc.db"] [unique_id "aS9mEsxbbt0ogMzhtK6lKgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 20:58:51
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:58:45.003537 2025] [security2:error] [pid 6705:tid 6724] [client 65.111.24.247:38487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tmsx2.com"] [uri "/.env"] [unique_id "aS9TBWa12PfYyZQMHMXQVQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:33:04
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:33:00.876969 2025] [security2:error] [pid 24345:tid 24345] [client 65.111.24.247:42039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ndezrojo.com"] [uri "/.env"] [unique_id "aS8-7Eybewc92jrn_-b0KQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 17:57:09
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 12:57:03.377263 2025] [security2:error] [pid 31862:tid 31862] [client 65.111.24.247:25589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lspfest.com"] [uri "/.git/HEAD"] [unique_id "aS8ob1DEe5AwBMlTIFnUuwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
