🇩🇪
stinpriza
2026-06-28 23:19:00
(19 hours ago)
Web App Attack
Web App Attack
2026-06-28 07:45:13
(1 day ago)
Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.
Web App Attack
🇲🇽
octageeks.com
2026-06-26 04:09:44
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇬🇧
spamverify.com
2026-06-25 01:10:52
(4 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-22 19:15:28
(6 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-05 03:05:42
(3 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 20:24:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:24:05.536719 2025] [security2:error] [pid 26268:tid 26268] [client 65.111.20.210:56379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seebeexee.com"] [uri "/.env"] [unique_id "aS9K5QmzUeJjjoC313qj5wAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 19:42:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:42:40.187659 2025] [security2:error] [pid 13139:tid 13139] [client 65.111.20.210:10619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bews.com"] [uri "/.env"] [unique_id "aS9BMJ5jRJGDMbokSPfWTQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2025-12-02 01:25:53
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:23:21
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:23:17.317489 2025] [security2:error] [pid 3738194:tid 3738258] [client 65.111.20.210:48331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.iancaird.com"] [uri "/.svn/wc.db"] [unique_id "aSbVFe4rPrCkg_k23hOVmgAAAhI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:15:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:15:04.083509 2025] [security2:error] [pid 28889:tid 28889] [client 65.111.20.210:30093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.napkinsforweddings.com"] [uri "/.git/HEAD"] [unique_id "aSaa6NUoO3IZdUebSsKhdgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:40:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:39:56.432798 2025] [security2:error] [pid 29928:tid 29928] [client 65.111.20.210:13769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vrmapping.net"] [uri "/.git/HEAD"] [unique_id "aSZMXJFjwDnSiiq1lZBv7wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:10:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:10:04.250328 2025] [security2:error] [pid 25050:tid 25050] [client 65.111.20.210:57377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.planettony.com"] [uri "/.env"] [unique_id "aSQS3PBXPDJDD_LQmGsxnQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:56:57
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:56:51.860434 2025] [security2:error] [pid 18796:tid 18796] [client 65.111.20.210:38023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cometoorderva.com"] [uri "/.git/HEAD"] [unique_id "aSPzo-O8Y6TEUU_3wUaxNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-30 19:06:02
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.20.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 30 15:05:57.828486 2025] [security2:error] [pid 27685:tid 27685] [client 65.111.20.210:16431] [client 65.111.20.210] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gensou.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gensou.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-mWFaV5vwabESu_hlellwAAACA"], referer: https://gensou.net
show less
Brute-Force
Bad Web Bot
Web App Attack