🇩🇪
FeG Deutschland
2026-09-16 14:43:07
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇨🇭
SOC [GOLINE SA]
2026-09-03 09:53:20
(2 weeks ago)
[RoutePulse | 2026-09-03T09:53:20Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 65.111.27.2 ...
show more
[RoutePulse | 2026-09-03T09:53:20Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 65.111.27.232 · AS200373 3xK Tech GmbH · Thailand
EVIDENCE: Cisco VPN RA Brute force on Cisco FTDv — distributed attack (8 attempts/15min)
DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring
ACTION: BGP null route injected at RoutePulse network edge
show less
Brute-Force
Hacking
🇮🇹
VHosting
2026-08-14 16:35:03
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:49:17
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-23 04:50:16
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
masterguru
2026-06-15 10:34:01
(3 months ago)
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 's ...
show more
SQL Injection Attack Detected via libinjection. detected SQLi using libinjection with fingerprint 's&sos' (942100-193)
show less
SQL Injection
🇺🇸
mnsf
2026-03-27 01:06:08
(5 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
2026-03-08 15:00:31
(6 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇹
VHosting
2026-03-03 20:05:07
(6 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
F242
2026-01-30 05:33:30
(7 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇬🇧
Swiptly
2026-01-21 16:26:45
(7 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 15:26:32
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 10:26:28.116665 2026] [security2:error] [pid 16208:tid 16208] [client 65.111.27.232:60377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radtraininginc.com"] [uri "/.env"] [unique_id "aXDwJAjCpXmNdjznrNxVqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 09:15:27
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 04:15:22.481556 2026] [security2:error] [pid 30816:tid 30816] [client 65.111.27.232:25801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brightspine.com"] [uri "/.git/HEAD"] [unique_id "aXCZKvUag_1eN_XQa9jg0wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 03:39:05
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 65.111.27.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 20 22:38:58.949115 2026] [security2:error] [pid 23788:tid 23788] [client 65.111.27.232:15033] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||forefrontmusic.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forefrontmusic.com"] [uri "/.svn/wc.db"] [unique_id "aXBKUgsMG4c8Ck8_a-SyEQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-20 21:44:14
(7 months ago)
Blocking for trying to access an exploit file: /.env
Hacking