🇨🇭
rt
2026-07-19 18:03:30
(17 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-06-14 19:15:29
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
webgobe
2026-06-03 17:52:36
(1 month ago)
wew-Joomla User : try to access forms...
Hacking
🇩🇪
Hazzard
2026-05-16 08:24:06
(2 months ago)
(wordpress) Failed wordpress login from 65.111.20.82 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): ...
show more
(wordpress) Failed wordpress login from 65.111.20.82 (BR/Brazil/São Paulo/São Paulo/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇱🇻
garmtech.com
2026-04-26 13:12:10
(2 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 04:33:59
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 23:33:53.026370 2026] [security2:error] [pid 29619:tid 29619] [client 65.111.20.82:28113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beeswaxnews.halotoys.com"] [uri "/.git/config"] [unique_id "aZ0qMYz3fsCLqdxjAnnqYwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
adembaysal
2026-02-23 20:13:04
(4 months ago)
Domain : morsmerlin.isteasistan.com
Rule : config
2026-02-23 20:10:48 ***hidden-privacy*** GET /.git ...
show more
Domain : morsmerlin.isteasistan.com
Rule : config
2026-02-23 20:10:48 ***hidden-privacy*** GET /.git/config - 80 - 65.111.20.82 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) - morsmerlin.isteasistan.com 404 8 0 1519 197 1250 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-02-23 15:17:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 10:17:37.436484 2026] [security2:error] [pid 9890:tid 9914] [client 65.111.20.82:17261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfinancialanalyst.org.aafm.us"] [uri "/.git/config"] [unique_id "aZxvkYHDeYMY3cfdJ7oqngAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 22:04:56
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 17:04:49.171499 2026] [security2:error] [pid 15127:tid 15127] [client 65.111.20.82:35815] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||charleshenri.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "charleshenri.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZeJAfgftR364A-5u75u3gAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
(7 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
oncord
2025-11-30 08:33:41
(7 months ago)
Form spam
Web Spam
🇱🇻
garmtech.com
2025-11-19 05:14:07
(8 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-14.65.111.20.82.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-14.65.111.20.82.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇬🇧
relianoid.com
2025-11-13 02:45:11
(8 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
TPI-Abuse
2024-12-15 11:33:30
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.20.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 15 06:33:24.008928 2024] [security2:error] [pid 30333:tid 30333] [client 65.111.20.82:7331] [client 65.111.20.82] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dossat.cl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dossat.cl"] [uri "/wp-json/wp/v2/users"] [unique_id "Z16-hHD6435KemMMbJzssAAAABg"], referer: https://dossat.cl
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2024-09-26 13:26:07
(1 year ago)
WP Login Scan Activities
Web App Attack