2026-03-13 18:48:52
(2 months ago)
FREKISCOM WEBFORM SPAM 65.111.29.237 (65.111.29.237)
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 07:51:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:51:36.020344 2026] [security2:error] [pid 11616:tid 11616] [client 65.111.29.237:23921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kylight.net"] [uri "/api/.env"] [unique_id "aY7YCH6ml9CTfhZfrhKpWQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-02-13 06:08:07
(3 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.29.237 (FR/France/-): 1 in t ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.29.237 (FR/France/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:37:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:37:32.329017 2026] [security2:error] [pid 26910:tid 26910] [client 65.111.29.237:33649] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kofcasamblea442.org"] [uri "/api/.git/config"] [unique_id "aY64nMAHlj2P2cA-Y_VEYwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:22:10
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:22:05.776469 2026] [security2:error] [pid 1241050:tid 1241050] [client 65.111.29.237:28511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khaoula.com"] [uri "/site/.git/config"] [unique_id "aY6Y3Qd4iRE2T5dckQbc1AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:57:47
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:57:39.257710 2026] [security2:error] [pid 4188:tid 4188] [client 65.111.29.237:12927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kevamra.com"] [uri "/app/.env"] [unique_id "aY6TI7lmV5cK7_Mw2W_BhgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-02-13 02:05:00
(3 months ago)
Web App Attack
🇩🇪
Carsten
2026-02-12 21:04:44
(3 months ago)
GET [.env]
Port Scan
🇺🇸
TPI-Abuse
2026-02-12 18:54:05
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 13:53:59.711730 2026] [security2:error] [pid 30972:tid 30972] [client 65.111.29.237:10417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exit10band.com"] [uri "/.git/config"] [unique_id "aY4hx2lkArl0khzX3PLjowAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 17:23:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:23:22.685451 2026] [security2:error] [pid 23660:tid 23660] [client 65.111.29.237:62891] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bernescobar.com"] [uri "/.env"] [unique_id "aY4MirTbiDjVVhKMfgmZpwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 16:29:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:29:35.289835 2026] [security2:error] [pid 1388802:tid 1388802] [client 65.111.29.237:38463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthuregau.com"] [uri "/.env"] [unique_id "aY3_73PAA4xTNco1XwszswAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-11 22:59:22
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-11
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-11 12:10:27
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 07:10:20.541170 2026] [security2:error] [pid 23378:tid 23378] [client 65.111.29.237:62177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edmontonwaterjet.com"] [uri "/dev/.git/config"] [unique_id "aYxxrCLIB5BKlK6nva4v6gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 16:37:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:37:22.739613 2026] [security2:error] [pid 21621:tid 21621] [client 65.111.29.237:11341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bostonmarathonstories.com"] [uri "/.env.production"] [unique_id "aYtewvukb_TGxDwiYyDq1gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 16:15:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.29.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:15:31.317732 2026] [security2:error] [pid 14636:tid 14636] [client 65.111.29.237:39137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conquesticon.org"] [uri "/.env.production"] [unique_id "aYtZoxzI43LnOI0mu6bBjwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack