๐ฆ๐บ
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
๐ง๐ท
hostseries
2025-12-24 06:10:24
(5 months ago)
Trigger: LF_DISTATTACK
Brute-Force
๐ฌ๐ง
D3monite
2025-12-09 18:24:11
(5 months ago)
Attempted Brute Force (cpaneld)
Brute-Force
๐ฑ๐ป
garmtech.com
2025-12-05 00:39:07
(6 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-39.65.111.14.45.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-39.65.111.14.45.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:46:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:46:37.768365 2025] [security2:error] [pid 27357:tid 27357] [client 65.111.14.45:9971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dragoldio.com"] [uri "/.git/HEAD"] [unique_id "aSU0rcUA7M5_272NnJljwgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:24:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:24:50.656155 2025] [security2:error] [pid 31580:tid 31580] [client 65.111.14.45:22571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.churchtop.com"] [uri "/.svn/wc.db"] [unique_id "aSUvktWMUmc5ckwWaghkuQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 04:07:42
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:07:37.279250 2025] [security2:error] [pid 6626:tid 6626] [client 65.111.14.45:15057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.nmorganist.org"] [uri "/.git/HEAD"] [unique_id "aSUriWc0X-YtS0qV9vOONgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 03:03:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:03:38.509246 2025] [security2:error] [pid 22132:tid 22132] [client 65.111.14.45:49541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ndezrojo.com"] [uri "/.env"] [unique_id "aSUcioHtFWwG2tv6EvOTXAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-25 00:14:53
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:14:49.829507 2025] [security2:error] [pid 18808:tid 18808] [client 65.111.14.45:47607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bighandsomedaddy.com"] [uri "/.git/HEAD"] [unique_id "aST0-bvu5NDZ8UcJyzdEegAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 08:17:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:17:30.265222 2025] [security2:error] [pid 27606:tid 27606] [client 65.111.14.45:49107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wackywipeouts.com"] [uri "/.svn/wc.db"] [unique_id "aSQUmjF-aTwXeFmdqzx0-gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 05:16:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:16:06.563241 2025] [security2:error] [pid 9545:tid 9545] [client 65.111.14.45:42377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.toomuchcaffeine.net"] [uri "/.env"] [unique_id "aSPqFhjOheT1q1bvgYnxJwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-11-24 04:29:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:29:34.433030 2025] [security2:error] [pid 20141:tid 20141] [client 65.111.14.45:24387] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.manty.com"] [uri "/.git/HEAD"] [unique_id "aSPfLkaqCjrPOBjHxhjDtwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-13 22:03:36
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
2025-10-27 22:18:25
(7 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.27 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.27 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
2025-10-22 16:19:26
(7 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.22 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.22 is noted in report timestamp
show less
Hacking
Brute-Force