🇬🇷
setupgr
2026-10-21 17:48:57
(1 day ago)
(wplogin_block) Blocked WP-Login Access Attempt 65.111.8.152 (US/United States/Virginia/Ashburn/-/[A ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 65.111.8.152 (US/United States/Virginia/Ashburn/-/[AS200373 3xK Tech GmbH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 65.111.8.152 - - [21/Oct/2026:20:35:41 +0300] "GET /wp-login.php HTTP/1.1" 200 43474 "-" "Sorter-Aggregator-WooCommerce/1.0"
show less
Port Scan
🇺🇸
drewf.ink
2026-09-29 07:50:35
(3 weeks ago)
[07:50] Attempted HTTPS GlobalProtect login with credentials reidh:W******1
Web App Attack
🇺🇸
drewf.ink
2026-09-24 18:21:01
(4 weeks ago)
[18:21] Attempted HTTPS GlobalProtect login with credentials webrown:w*****n
Web App Attack
🇪🇸
raiolanetworks.com
2026-09-20 22:31:08
(1 month ago)
Honeypot detection: Cisco ASA exploit attempt. 3 events observed. Reported automatically from a hone ...
show more
Honeypot detection: Cisco ASA exploit attempt. 3 events observed. Reported automatically from a honeypot sensor.
show less
Hacking
🇸🇪
OnTheEdge
2026-09-04 09:33:48
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
NxtGenIT
2026-09-04 08:15:45
(1 month ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,
Brute-Force
🇫🇷
Sklurk
2026-08-16 00:05:15
(2 months ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-08-02 03:19:21
(2 months ago)
Web App Attack
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(6 months ago)
"DDoS against public endpoint"
DDoS Attack
2026-03-15 02:50:33
(7 months ago)
Forum/form spam
Web Spam
🇬🇧
relianoid.com
2026-02-25 08:30:54
(7 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2026-02-24 11:51:24
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 06:51:20.432315 2026] [security2:error] [pid 8113:tid 8125] [client 65.111.8.152:62101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dpiazza.piazza9.com"] [uri "/.git/config"] [unique_id "aZ2QuB4c-osopQhm2a-LOwAAAYk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 07:36:06
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 02:36:03.347815 2026] [security2:error] [pid 1709:tid 1709] [client 65.111.8.152:39989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bulimia.disabilitiesdespair.com"] [uri "/.git/config"] [unique_id "aZ1U417ZzQ1TftVGrQZhJAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 21:09:02
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 16:08:55.404774 2026] [security2:error] [pid 17681:tid 17681] [client 65.111.8.152:32921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclingboardgames.net.ankitoner.com"] [uri "/.git/config"] [unique_id "aZzB5zkRmoJS9VhiCANcFQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 14:44:17
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.8.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 09:44:12.768012 2026] [security2:error] [pid 14340:tid 14340] [client 65.111.8.152:36545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiny.abecasis.com"] [uri "/.git/config"] [unique_id "aZxnvJQw0ezHek12xUYKhgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack