🇲🇽
octageeks.com
2026-06-30 04:15:46
(1 day ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇲🇽
octageeks.com
2026-06-28 04:15:15
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
pm33
2026-06-27 09:48:22
(3 days ago)
Wordpress login attempts
Brute-Force
🇺🇸
TPI-Abuse
2026-02-15 12:38:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:38:27.888825 2026] [security2:error] [pid 1931612:tid 1931612] [client 65.111.23.14:21349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pascalroy.com"] [uri "/new/.git/config"] [unique_id "aZG-Q4EXNrRuUDv2yquWBwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-02-15 12:18:43
(4 months ago)
(modsecurity) srv101 ModSecurity 65.111.23.14 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: ...
show more
(modsecurity) srv101 ModSecurity 65.111.23.14 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇫🇷
dynamix
2026-02-15 11:56:50
(4 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:45:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:45:40.848238 2026] [security2:error] [pid 20970:tid 20970] [client 65.111.23.14:26949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qcyprus.com"] [uri "/backup/.git/config"] [unique_id "aZGx5FAaWCKzpUIzMFPH2wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:07:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:07:36.255574 2026] [security2:error] [pid 2781720:tid 2781720] [client 65.111.23.14:60569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seize-the-season.com"] [uri "/wp/.git/config"] [unique_id "aZGo-G3-R_WtFYnvDzhN4QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:15:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:14:56.972167 2026] [security2:error] [pid 28204:tid 28204] [client 65.111.23.14:30987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schunagroup.com"] [uri "/wp/.git/config"] [unique_id "aZFkYPLawZXFytytmx-JVgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-15 06:07:01
(4 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 05:19:46
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:19:40.834456 2026] [security2:error] [pid 24209:tid 24227] [client 65.111.23.14:49467] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "princesscastlebunkbed.com"] [uri "/.env.production"] [unique_id "aZFXbGl2ArKkOi45FeqCpQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 04:16:19
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:16:14.917732 2026] [security2:error] [pid 22332:tid 22332] [client 65.111.23.14:37561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrvoutdoors.com"] [uri "/admin/.git/config"] [unique_id "aZFIjmeWfvZzLoFgNmw1fAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 03:08:41
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:08:35.025264 2026] [security2:error] [pid 3582:tid 3582] [client 65.111.23.14:60111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poland-yacht-registration.com"] [uri "/.env.staging"] [unique_id "aZE4s3aNObL04KbeWWde7wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 01:52:09
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 20:52:03.735900 2026] [security2:error] [pid 23545:tid 23545] [client 65.111.23.14:57073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pistone.us"] [uri "/.env.local"] [unique_id "aZEmw9ZlopkP2u1pTClhOAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
konseptit
2026-02-15 01:47:21
(4 months ago)
(mod_security) mod_security triggered on hostname [redacted] 65.111.23.14 (GB/United Kingdom/-)
SQL Injection