🇨🇿
lp
2026-09-19 18:21:44
(2 days ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.25.121
2026-09-19T18:48:12+02: ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.25.121
2026-09-19T18:48:12+02:00 vpn Access-Reject 'enduser' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-19T18:49:55+02:00 vpn Access-Reject 'fengji' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-18 15:21:21
(3 days ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 65.111.25.121
2026-09-18T16:19:59+02: ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 65.111.25.121
2026-09-18T16:19:59+02:00 vpn Access-Reject 'maintenance' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-18T16:21:40+02:00 vpn Access-Reject 'brigadnik' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-18T16:23:12+02:00 vpn Access-Reject 'isa' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-18T16:25:01+02:00 vpn Access-Reject 'cabinet' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-18T16:26:36+02:00 vpn Access-Reject 'asif' station: 65.111.25.121 auth-type: - realm: vse.cz nas: <redac
show less
Brute-Force
Web App Attack
🇨🇭
backslash
2026-09-07 16:12:04
(2 weeks ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇫🇷
Sklurk
2026-08-03 03:35:19
(1 month ago)
Web App Attack
Web App Attack
🇮🇹
VHosting
2026-07-16 21:45:03
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
4server
2026-05-22 13:17:49
(3 months ago)
[FriMay2215:17:47.8337972026][security2:error][pid3603396:tid3603525][client65.111.25.121:0]ModSecur ...
show more
[FriMay2215:17:47.8337972026][security2:error][pid3603396:tid3603525][client65.111.25.121:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.restaurantgandria.ch\"][uri\"/wp-login.php\"][unique_id\"ahBXe8GhbF2hmf95ovEhOgAAARY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-02-13 13:07:06
(7 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 12:46:10
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:46:01.722670 2026] [security2:error] [pid 31910:tid 31910] [client 65.111.25.121:54607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasvegaskiss.com"] [uri "/.env.production"] [unique_id "aY8dCY1nu0ehaFCzAwcv_wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:42:50
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:42:43.843133 2026] [security2:error] [pid 8245:tid 8245] [client 65.111.25.121:24939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mesaparaseis.com"] [uri "/.env.save"] [unique_id "aY7kAzq10PTO8fELDLYrJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:32:39
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:32:33.467114 2026] [security2:error] [pid 1514289:tid 1514289] [client 65.111.25.121:40877] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meghanmack.com"] [uri "/.env"] [unique_id "aY7TkRZCFPV8MqY1H54aLQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
mauri64
2026-02-13 05:30:12
(7 months ago)
lfd - (mod_security) mod_security (id:949110) triggered by 65.111.25.121 (-): 5 in the last 3600 sec ...
show more
lfd - (mod_security) mod_security (id:949110) triggered by 65.111.25.121 (-): 5 in the last 3600 secs
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-02-13 05:29:51
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:29:45.097928 2026] [security2:error] [pid 18447:tid 18447] [client 65.111.25.121:53429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mauriciagandara.com"] [uri "/config/.env"] [unique_id "aY62yd1035g_P8w558T3uQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:56:47
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:56:42.022320 2026] [security2:error] [pid 2284752:tid 2284752] [client 65.111.25.121:23089] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masterpiecemorgans.com"] [uri "/.env"] [unique_id "aY6vCtGl5Fc9Xkfv993R4gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:36:26
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:36:18.068124 2026] [security2:error] [pid 2401498:tid 2401498] [client 65.111.25.121:44257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maryrosevaro.com"] [uri "/config/.env"] [unique_id "aY6qQsGmtZy-rHeWGij7vQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:39:59
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.25.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:39:52.172146 2026] [security2:error] [pid 11769:tid 11769] [client 65.111.25.121:58383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mandel.vc"] [uri "/config/.env"] [unique_id "aY6O-Gt-yScxsXnrCnsiqQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
