🇩🇪
Lino Project
2026-03-30 16:00:00
(2 months ago)
65.111.13.62 - - [30/Mar/2026:17:59:59 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https: ...
show more
65.111.13.62 - - [30/Mar/2026:17:59:59 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6555 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-25 00:17:09
(2 months ago)
Forum/form spam
Web Spam
🇳🇱
homeshowdomain.nl
2026-03-02 23:00:42
(3 months ago)
Auto-ban: >3000 req/min op 2026-03-02
Web App Attack
SSH
Hacking
🇦🇺
oncord
2026-02-23 23:05:48
(3 months ago)
Form spam
Web Spam
2026-02-18 05:37:59
(4 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-12 03:24:57
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 22:24:54.444467 2026] [security2:error] [pid 20867:tid 20867] [client 65.111.13.62:45233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artbytracyjane.com"] [uri "/.env.local"] [unique_id "aY1IBqUsHnXmhuV0FEg_xwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 02:27:21
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:27:16.808901 2026] [security2:error] [pid 5326:tid 5371] [client 65.111.13.62:49785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arrowsinthequiver.com"] [uri "/backend/.env"] [unique_id "aY06hP2kGrnOESJX597NQgAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 23:42:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 18:42:28.588440 2026] [security2:error] [pid 5822:tid 5822] [client 65.111.13.62:9893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appsdips.com"] [uri "/v2/.git/config"] [unique_id "aYvCZFl0cFDKNKiqtAdBQgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:41:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:41:09.359967 2026] [security2:error] [pid 31956:tid 31956] [client 65.111.13.62:31295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kobraagencies.com"] [uri "/backend/.env"] [unique_id "aYrE9RkEZXgRaYuBqvDF8wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:01:42
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:01:38.290802 2026] [security2:error] [pid 10755:tid 10755] [client 65.111.13.62:43915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswow.com"] [uri "/dev/.git/config"] [unique_id "aYqRgovUayN_vGEqrcWxYwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 23:37:29
(4 months ago)
Blocking for trying to access an exploit file: /site/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-09 22:19:28
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:19:19.473903 2026] [security2:error] [pid 20662:tid 20662] [client 65.111.13.62:29079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotrodsandromance.com"] [uri "/admin/.git/config"] [unique_id "aYpdZ3FISJOrrD-fodcdfAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-15 06:29:27
(5 months ago)
Forum/form spam
Web Spam
2026-01-11 03:35:42
(5 months ago)
wordpress-trap
Web App Attack
🇺🇸
chronos
2026-01-02 21:34:15
(5 months ago)
[AUTORAVALT][[02/01/2026 - 18:34:15 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[65.1 ...
show more
[AUTORAVALT][[02/01/2026 - 18:34:15 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[65.111.13.62] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other]
...
show less
Hacking
Web App Attack