🇱🇻
garmtech.com
2026-05-20 04:10:18
(2 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-10.65.111.24.9.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 07-10.65.111.24.9.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇱🇻
garmtech.com
2026-05-05 03:48:04
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-48.65.111.24.9.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 06-48.65.111.24.9.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-13 09:10:18
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:10:13.547367 2026] [security2:error] [pid 23229:tid 23309] [client 65.111.24.9:52189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/admin/.git/config"] [unique_id "aY7qdRLdtPHrxckGmU3iRwAAAZQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:12:38
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:12:33.985240 2026] [security2:error] [pid 18418:tid 18418] [client 65.111.24.9:63613] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/app/.env"] [unique_id "aY7c8as_duozJxpDc5fObgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 06:08:06
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.24.9 (DE/Germany/-): 1 in th ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.24.9 (DE/Germany/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:58:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:58:50.815521 2026] [security2:error] [pid 2631785:tid 2631785] [client 65.111.24.9:40349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klfreeman.com"] [uri "/.env.save"] [unique_id "aY6virBrlRDa7JHi9IvC6AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:25:25
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:25:18.342854 2026] [security2:error] [pid 24186:tid 24186] [client 65.111.24.9:19045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kirkrmartin.com"] [uri "/.env.local"] [unique_id "aY6nrq7M2iK6ihkjxbD1SAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:22:24
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:22:17.805067 2026] [security2:error] [pid 21945:tid 21971] [client 65.111.24.9:42821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithfamily.net"] [uri "/new/.git/config"] [unique_id "aY6K2RtceAHuS2V-cx0TsgAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-02-12 16:26:55
(3 months ago)
Try to access /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 15:08:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:08:09.793024 2026] [security2:error] [pid 24984:tid 24984] [client 65.111.24.9:44093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "b2c-llc.com"] [uri "/.git/config"] [unique_id "aY3s2cT48K070ha9_KOFjQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 05:58:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 00:58:08.507350 2026] [security2:error] [pid 11109:tid 11109] [client 65.111.24.9:27405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecrecorp.com"] [uri "/admin/.env"] [unique_id "aYwacJ7upr5z_eGmViG_3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 03:29:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 22:29:05.187719 2026] [security2:error] [pid 20916:tid 20916] [client 65.111.24.9:12145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corinthianscruise.org"] [uri "/.env.save"] [unique_id "aYv3gYUUDy6s9XxEvFvvpAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 20:58:13
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.24.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 15:58:08.861843 2026] [security2:error] [pid 3385:tid 3385] [client 65.111.24.9:61419] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contractorspecializing.com"] [uri "/app/.git/config"] [unique_id "aYub4JuO76b3pJ3T_ZppuAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hugopvigo
2026-02-10 18:31:34
(3 months ago)
65.111.24.9 - - [10/Feb/2026:19:31:33 +0100] "GET /.aws/credentials HTTP/1.1" 404 492 "-" "Mozilla/5 ...
show more
65.111.24.9 - - [10/Feb/2026:19:31:33 +0100] "GET /.aws/credentials HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Hacking
Brute-Force
Web App Attack
SSH