🇲🇽
octageeks.com
2026-05-30 04:15:03
(6 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇨🇭
backslash
2026-05-23 05:12:08
(1 week ago)
Bad Web Bot
🇬🇧
PeravixGroup
2026-05-09 09:35:42
(3 weeks ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇧🇪
madeit
2025-11-30 04:30:12
(6 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 19:49:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 14:49:42.429023 2025] [security2:error] [pid 26723:tid 26723] [client 65.111.30.71:32927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aandsmetal.com"] [uri "/.env.local"] [unique_id "aSn81nl6b2Rl0Sg5Ahgh8wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 05:11:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 00:11:43.202971 2025] [security2:error] [pid 14800:tid 14800] [client 65.111.30.71:37457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alsdepot.com"] [uri "/wp-config.txt"] [unique_id "aSkvD9QsB6INXO3xFKEJ6AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-15 06:36:33
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.30.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 01:36:27.024625 2024] [security2:error] [pid 9259:tid 9259] [client 65.111.30.71:5311] [client 65.111.30.71] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||siczewicz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "siczewicz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z15460NSCxWWXhc17mYpTgAAAAg"], referer: https://siczewicz.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2024-12-03 09:49:03
(1 year ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇨🇿
lp
2024-10-03 17:25:01
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.30.71
2024-10-03T14:27:37+02:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.30.71
2024-10-03T14:27:37+02:00 vpn Access-Reject 'pilo00' station: 65.111.30.71 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
2024-07-09 07:16:28
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-08 00:29:53
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-03 04:54:51
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-06-27 00:03:05
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH