🇪🇸
Gem
2026-09-11 22:10:53
(13 hours ago)
Unauthorized web scan.
Web App Attack
🇮🇩
Burayot
2026-09-09 21:38:51
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.24.108 (DE/Germany/-): 1 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.24.108 (DE/Germany/-): 1 in the last 3600 secs
show less
Web App Attack
2026-09-03 21:10:32
(1 week ago)
2026-09-03T23:10:32.005596+02:00 polaris wp(bikeschool.co.za)[848423]: Authentication attempt for un ...
show more
2026-09-03T23:10:32.005596+02:00 polaris wp(bikeschool.co.za)[848423]: Authentication attempt for unknown user Takuchris from 65.111.24.108
...
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-08-17 04:43:32
(3 weeks ago)
Web App Attack
Web App Attack
🇬🇷
setupgr
2026-06-22 02:20:21
(2 months ago)
(mod_security) mod_security (id:900001) triggered by 65.111.24.108 (DE/Germany/State of Berlin/Berli ...
show more
(mod_security) mod_security (id:900001) triggered by 65.111.24.108 (DE/Germany/State of Berlin/Berlin/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 05:20:16.358584 2026] [security2:error] [pid 1258345:tid 1258425] [client 65.111.24.108:11183] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: ftiaxtomonosou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-login.php"] [unique_id "ajib4ILbpAf1VQmqGONO5AAAAEQ"], referer: https://ftiaxtomonosou.gr/%ce%bc%ce%b5%ce%bb%ce%b1%ce%bc%ce%af%ce%bd%ce%b5%cf%82/
show less
Port Scan
🇺🇸
TPI-Abuse
2026-02-13 06:54:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:54:27.084577 2026] [security2:error] [pid 23313:tid 23313] [client 65.111.24.108:29261] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krystalsgiftshopandboutique.net"] [uri "/.env.local"] [unique_id "aY7Ko-37zIurXHb2y0V3sAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:29:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:29:27.129255 2026] [security2:error] [pid 23061:tid 23061] [client 65.111.24.108:38393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakenseattle.org"] [uri "/app/.env"] [unique_id "aY7Ex62crsW7pDzUelZgLQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:02:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:02:08.297394 2026] [security2:error] [pid 28868:tid 28868] [client 65.111.24.108:60705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koolcoastalnights.com"] [uri "/site/.git/config"] [unique_id "aY6-YGh69hcjxK07POVKIgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:55:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:55:24.138913 2026] [security2:error] [pid 732:tid 732] [client 65.111.24.108:30475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinareemagazine.com"] [uri "/wp/.git/config"] [unique_id "aY6grJX65ltwosGa6CyRxgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:54:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:53:59.075094 2026] [security2:error] [pid 9584:tid 9584] [client 65.111.24.108:42335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaylamaclaincounseling.com"] [uri "/api/.git/config"] [unique_id "aY6EN_SckVQHI1F8PzMv1wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:38:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:38:29.415272 2026] [security2:error] [pid 2429:tid 2429] [client 65.111.24.108:48349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathleenhazlett.com"] [uri "/new/.git/config"] [unique_id "aY6AlTuHf0BhRmi20x8KrwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 15:44:44
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:44:39.557892 2026] [security2:error] [pid 9045:tid 9045] [client 65.111.24.108:57737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhartman.com"] [uri "/.git/config"] [unique_id "aY31ZzrQMDrutEGPOocsVQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2026-02-12 05:07:46
(7 months ago)
GET [test/.git/config]
Port Scan
🇳🇱
homeshowdomain.nl
2026-02-11 22:59:44
(7 months ago)
Auto-ban: >3000 req/min op 2026-02-11
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-11 21:24:06
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 16:24:01.195896 2026] [security2:error] [pid 63664:tid 63664] [client 65.111.24.108:27899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "broneksuchanek.com"] [uri "/admin/.env"] [unique_id "aYzzcbMs5nEhpvIBy9BLsAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
