🇸🇪
shab
2026-09-03 09:47:30
(4 hours ago)
Suspicious VPN activity
Brute-Force
🇫🇷
Sklurk
2026-08-10 03:56:23
(3 weeks ago)
Web App Attack
Web App Attack
🇮🇹
Francesco Ippoliti
2026-07-24 18:18:10
(1 month ago)
[Jul 24 20:18:09] NOTICE[182036] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:101@15 ...
show more
[Jul 24 20:18:09] NOTICE[182036] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '65.111.14.61:11904' (callid: c6251e0773d3cefa8eb69e4c5716fd2c) - No matching endpoint found
[Jul 24 20:18:09] NOTICE[182193] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected] >' failed for '65.111.14.61:11904' (callid: c6251e0773d3cefa8eb69e4c5716fd2c) - No matching endpoint found
...
show less
Brute-Force
Port Scan
🇫🇷
Sklurk
2026-07-16 04:38:36
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:59:51
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-23 05:12:10
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
EGP Abuse Dept
2026-02-13 18:42:02
(6 months ago)
forum signup bot
Web Spam
Blog Spam
Web App Attack
🇦🇺
2000cn.com.au
2026-02-11 21:04:51
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 15:34:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:34:02.309172 2026] [security2:error] [pid 27876:tid 27876] [client 65.111.14.61:39361] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10mostwantedfugitives.net"] [uri "/.env.save"] [unique_id "aYtP6oFp_PIA5M7CDRl5TQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:37:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:36:54.603327 2026] [security2:error] [pid 12514:tid 12514] [client 65.111.14.61:25711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kletzer.com"] [uri "/dev/.git/config"] [unique_id "aYq15nVNoKavBW0-Rcg67gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:13:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:13:28.958731 2026] [security2:error] [pid 881:tid 881] [client 65.111.14.61:33847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ichi51e.net"] [uri "/.env.save"] [unique_id "aYqwaIm-DFWfpHalMZldwwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 03:40:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:40:26.571541 2026] [security2:error] [pid 15343:tid 15343] [client 65.111.14.61:60073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibermar.info"] [uri "/.env.staging"] [unique_id "aYqoqmmY9LzLK_06ajAVAwAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-10 03:27:59
(6 months ago)
Blocking for trying to access an exploit file: /app/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-10 02:58:55
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:58:50.639025 2026] [security2:error] [pid 12808:tid 12819] [client 65.111.14.61:48591] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-masmx.com"] [uri "/.env.save"] [unique_id "aYqe6itDVRwtbLhRmDQD8gAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 23:43:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.14.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:43:02.911838 2026] [security2:error] [pid 19250:tid 19250] [client 65.111.14.61:11069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelting.net"] [uri "/dev/.git/config"] [unique_id "aYpxBiObzyRnfmhqOXl0XgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack