2026-03-22 13:40:03
(2 months ago)
| [Dangerous/China] Aggressive IP 65.111.21.86 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/China] Aggressive IP 65.111.21.86 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇱🇻
garmtech.com
2026-03-09 20:24:19
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-24.65.111.21.86.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-24.65.111.21.86.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 12:25:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 07:25:29.568165 2025] [security2:error] [pid 30184:tid 30184] [client 65.111.21.86:57695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seashellweddinginvitations.com"] [uri "/.env"] [unique_id "aVJzOS4tJbR-7B6dIH3XjAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 10:10:44
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 05:10:37.543301 2025] [security2:error] [pid 23028:tid 23028] [client 65.111.21.86:58605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lidarthur.com"] [uri "/.env"] [unique_id "aVJTnSyWSAyxdtAZrd3kOwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 08:27:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:27:29.654829 2025] [security2:error] [pid 5759:tid 5759] [client 65.111.21.86:26153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howelllands.com"] [uri "/.svn/wc.db"] [unique_id "aVI7cXozu3DW1v2m5_IdogAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 07:18:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 02:18:38.958659 2025] [security2:error] [pid 12982:tid 12982] [client 65.111.21.86:54461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kimbrothersusa.com"] [uri "/.git/HEAD"] [unique_id "aVIrTtHk-dAu5jMOPXCERQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:47:52
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:47:47.225486 2025] [security2:error] [pid 19697:tid 19697] [client 65.111.21.86:37601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "askmedichat.com"] [uri "/.git/HEAD"] [unique_id "aVIkExE6vmZMlpf6RC80kwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:02:22
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:02:18.729378 2025] [security2:error] [pid 26332:tid 26332] [client 65.111.21.86:55371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azbrooks.com"] [uri "/.git/HEAD"] [unique_id "aVIZaoIt7SVZL_Y5V3E8mwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 05:04:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:04:28.685535 2025] [security2:error] [pid 5770:tid 5770] [client 65.111.21.86:26903] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cymbelescircles.com"] [uri "/.env"] [unique_id "aVIL3Lz8JhMzBI6QrB3mCgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 22:10:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:10:36.091181 2025] [security2:error] [pid 10169:tid 10169] [client 65.111.21.86:21687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-peopleland.com"] [uri "/.git/HEAD"] [unique_id "aS9j3GjeiQ4QfRKAxWj-FgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 17:23:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 12:23:12.891000 2025] [security2:error] [pid 5371:tid 5371] [client 65.111.21.86:28127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunsettrailsardmore.com"] [uri "/.svn/wc.db"] [unique_id "aS8ggOYNttVuv6PX2_nS4AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 07:10:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:10:06.104244 2025] [security2:error] [pid 22159:tid 22159] [client 65.111.21.86:54229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/.env"] [unique_id "aS6QzsTeYtVrGukNl7X6zQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:09:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:09:27.861555 2025] [security2:error] [pid 20176:tid 20176] [client 65.111.21.86:58507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ikutabukkyokai.com"] [uri "/.git/HEAD"] [unique_id "aS50hwxtWKo-6JpjMsbZKAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 03:11:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 22:11:39.404139 2025] [security2:error] [pid 24651:tid 24651] [client 65.111.21.86:58995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getclock.click"] [uri "/.git/HEAD"] [unique_id "aS5Y64tTPeji1k66zEawOAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:18:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.21.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:18:19.543677 2025] [security2:error] [pid 16484:tid 16484] [client 65.111.21.86:30927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.thoughtage.org"] [uri "/.svn/wc.db"] [unique_id "aSPci2-BKJ4sFbQvkZ3GGQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack