|
๐ซ๐ท
Fasetech
|
|
SecLedge detected suspicious activity. Score: 425.52. Sensor: T-Pot.
|
Brute-Force
|
|
|
๐ซ๐ท
IRISIO
|
|
scans/SQL injection/spam posts : 1015 queries
|
Web App Attack
SQL Injection
|
|
|
Anonymous
|
|
194.182.86.60 - - [24/Jun/2026:09:00:54 +0200] "GET /wp-includes/assets/xc.php/wp-content/ HTTP/1.1" ...
show more
194.182.86.60 - - [24/Jun/2026:09:00:54 +0200] "GET /wp-includes/assets/xc.php/wp-content/ HTTP/1.1" 404 123575 "https://brasfox.com/wp-includes/assets/xc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [24/Jun/2026:09:01:01 +0200] "GET /wp-includes/assets/wp-content/ HTTP/1.1" 404 123517 "https://brasfox.com//wp-includes/assets/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [24/Jun/2026:09:01:02 +0200] "GET /wp-includes/assets/wp-content/ HTTP/1.1" 404 22956 "https://brasfox.com//wp-includes/assets/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [24/Jun/2026:09:01:06 +0200] "GET /wp-includes/assets/xc.php/wp-content/ HTTP/1.1" 404 123580 "https://brasfox.com/wp-includes/assets/xc.php" "Mozilla/5.0 (Windows NT
...
show less
|
Brute-Force
Web App Attack
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS2 ...
show more
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 00:05:05.407895 2026] [security2:error] [pid 1934718:tid 2649411] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/cong.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /admin.php/cong.php"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/admin.php/cong.php"] [unique_id "ajr1AZ59dcPKThU2ezBvFgAA0Bo"], referer: https://santoriniicon.com/admin.php
show less
|
Port Scan
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS2 ...
show more
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 22:02:09.509253 2026] [security2:error] [pid 2059052:tid 2059054] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /admin.php/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/admin.php/about.php"] [unique_id "ajrYMVNPFwkSkEkc_m13nQABAQE"], referer: https://santoriniicon.com/admin.php
show less
|
Port Scan
|
|
|
๐ซ๐ท
IRISIO
|
|
scans/SQL injection/spam posts : 401 queries
|
Web App Attack
SQL Injection
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24 ...
show more
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 15:18:17.727190 2026] [security2:error] [pid 1934756:tid 2494827] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: santoriniicon.com"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/wp-admin/network/wp-login.php"] [unique_id "ajp5iS7wGrlvgFoRVzYv5gABSCA"], referer: https://santoriniicon.com/
show less
|
Port Scan
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24 ...
show more
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 14:10:25.668523 2026] [security2:error] [pid 1934718:tid 2470866] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: santoriniicon.com"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/admin.php/wp-includes/customize/wp-login.php"] [unique_id "ajppoZ59dcPKThU2ezDtQQAAxx0"], referer: https://santoriniicon.com/admin.php
show less
|
Port Scan
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS2 ...
show more
(mod_security) mod_security (id:1000001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 13:06:37.156706 2026] [security2:error] [pid 2059052:tid 2439796] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-content/admin.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /admin.php/wp-content/admin.php"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/admin.php/wp-content/admin.php"] [unique_id "ajparVNPFwkSkEkc_m0XLAABFRo"], referer: https://santoriniicon.com/admin.php
show less
|
Port Scan
|
|
|
๐ธ๐ฌ
pusathosting.com
|
|
24ds22 bruteforce
|
Brute-Force
Web App Attack
|
|
|
๐ง๐ช
cmbplf
|
|
328 requests with url.path */.well-known/acme-challenge/*.php
|
Brute-Force
Bad Web Bot
|
|
|
๐ซ๐ท
IRISIO
|
|
scans/SQL injection/spam posts : 200 queries
|
Web App Attack
SQL Injection
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24 ...
show more
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 11:15:26.059700 2026] [security2:error] [pid 1934756:tid 1934790] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: santoriniicon.com"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ajpAni7wGrlvgFoRVzYJnwABTwA"], referer: https://santoriniicon.com/
show less
|
Port Scan
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24 ...
show more
(mod_security) mod_security (id:900001) triggered by 194.182.86.60 (CZ/Czechia/Prague/Prague/-/[AS24806 INTERNET-CZ Ktis 2, 384 03 Ktis]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 23 10:08:42.354823 2026] [security2:error] [pid 1934813:tid 1934861] [remote 194.182.86.60:0] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: santoriniicon.com"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/admin.php/wp-includes/fonts/wp-login.php"] [unique_id "ajow-vVHAYoCTqtXWiXw1AAAlgQ"], referer: https://santoriniicon.com/admin.php
show less
|
Port Scan
|
|
|
Anonymous
|
|
194.182.86.60 - - [23/Jun/2026:08:53:45 +0200] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 12 ...
show more
194.182.86.60 - - [23/Jun/2026:08:53:45 +0200] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 123526 "https://brasfox.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [23/Jun/2026:08:53:46 +0200] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 22961 "https://brasfox.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [23/Jun/2026:09:00:45 +0200] "GET /wp-includes/assets/wp-includes/fonts/wp-login.php HTTP/1.1" 404 123697 "https://brasfox.com//wp-includes/assets/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
194.182.86.60 - - [23/Jun/2026:09:00:45 +0200] "GET /wp-includes/assets/wp-includes/fonts/wp-login.php HTTP/1.1" 404 22967 "https://brasfox.com//wp-includes/assets/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK
...
show less
|
Brute-Force
Web App Attack
|
|