🇳🇱
Alt255
2026-10-18 01:06:18
(6 days ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 65.111.15.8 - - [18/Oct/2026:03:05:54 +0200] "GET /.git/config.copy HTTP/1.1" 404 12550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-14 22:02:18
(1 week ago)
Auto-ban: >3000 req/min op 2026-10-14
Web App Attack
SSH
Hacking
🇨🇿
lp
2026-09-22 22:50:30
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.8
2026-09-23T00:33:11+02:00 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.8
2026-09-23T00:33:11+02:00 vpn Access-Reject 'burak.ozturk' station: 65.111.15.8 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-22 04:50:00
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.8
2026-09-22T05:53:50+02:00 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.8
2026-09-22T05:53:50+02:00 vpn Access-Reject 'st9vpn' station: 65.111.15.8 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇭
backslash
2026-09-12 16:48:09
(1 month ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇸🇪
OnTheEdge
2026-09-04 12:06:05
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇪🇸
librebit
2026-05-17 04:12:44
(5 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-02-15 12:46:09
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:46:02.850800 2026] [security2:error] [pid 16677:tid 16677] [client 65.111.15.8:57601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pathpa.org"] [uri "/frontend/.env"] [unique_id "aZHACjwLgEyjzBxKa_L2-QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 12:17:21
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:17:16.241416 2026] [security2:error] [pid 4583:tid 4583] [client 65.111.15.8:11413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paragonprintingcenter.com"] [uri "/app/.env"] [unique_id "aZG5TLcdoh3faLYlHVsttwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:58:07
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:58:04.904448 2026] [security2:error] [pid 9728:tid 9728] [client 65.111.15.8:62115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palmatrader.com"] [uri "/v2/.git/config"] [unique_id "aZG0zFk6i8gyCNIJCxCLoAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:37:08
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:37:01.097604 2026] [security2:error] [pid 880:tid 880] [client 65.111.15.8:60295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pa-ksa.com"] [uri "/new/.git/config"] [unique_id "aZGv3edWdd-wEyW6uPkamQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:16:36
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:16:32.242903 2026] [security2:error] [pid 4387:tid 4387] [client 65.111.15.8:35739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purplebikinis.com"] [uri "/backend/.env"] [unique_id "aZGrENeaMLYV9Cmlthw9yAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-02-15 07:02:27
(8 months ago)
(modsecurity) srv101 ModSecurity 65.111.15.8 (US/United States/-): 5 in the last 3600 secs; Ports: * ...
show more
(modsecurity) srv101 ModSecurity 65.111.15.8 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:33:54
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.15.8 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:33:48.885586 2026] [security2:error] [pid 2397:tid 2397] [client 65.111.15.8:45787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scraggw.com"] [uri "/test/.git/config"] [unique_id "aZFozDFouiutrIUZkhhSfgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-15 05:17:58
(8 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
