2026-10-18 20:03:20
(2 days ago)
Blocked by ModSec and CSF
Port Scan
🇳🇱
Alt255
2026-10-18 15:50:18
(3 days ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 65.111.3.211 - - [18/Oct/2026:17:49:52 +0200] "GET /public_html/.env.orig HTTP/1.1" 404 12577 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
boombies
2026-09-28 22:11:00
(3 weeks ago)
edaniels
Brute-Force
🇨🇿
lp
2026-09-20 01:50:23
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.3.211
2026-09-20T03:38:19+02:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.3.211
2026-09-20T03:38:19+02:00 vpn Access-Reject 'torrent' station: 65.111.3.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:03:59
(3 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 13:14:22
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 08:14:14.901895 2026] [security2:error] [pid 22026:tid 22026] [client 65.111.3.211:64093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schmuck.banis-associates.com"] [uri "/.git/config"] [unique_id "aZxSpst8ktxNoLccTYEAqgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 11:59:15
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 06:59:07.487517 2026] [security2:error] [pid 2321:tid 2321] [client 65.111.3.211:35963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgium-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "aZxBC1qqkRS9hkr7UnFHLQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:49
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-11-28 16:00:44
(10 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.28 is noted in report timestamp
show less
Hacking
Brute-Force
🇫🇮
kumiko
2025-11-25 20:09:07
(10 months ago)
[2025-11-25 22:09:06] Probing for dotfiles
"GET /.aws/credentials HTTP/1.1" 301
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-25 19:15:27
(10 months ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2025-11-25 05:28:46
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:28:39.827568 2025] [security2:error] [pid 2893:tid 2893] [client 65.111.3.211:17115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.postaltales.com"] [uri "/.svn/wc.db"] [unique_id "aSU-hxjtHJiOfLkNIAigDAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:02:02
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:01:51.445898 2025] [security2:error] [pid 707356:tid 707356] [client 65.111.3.211:35087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pluralmatrix.net"] [uri "/.env"] [unique_id "aSUcH-meJiJi_3Zj4NsaQQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:30:23
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:30:16.612154 2025] [security2:error] [pid 12716:tid 12744] [client 65.111.3.211:26863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rubenluis.com"] [uri "/.env"] [unique_id "aSUUuNFyYQkDKh-KlDQTPgAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:58:27
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:58:21.207295 2025] [security2:error] [pid 26859:tid 26859] [client 65.111.3.211:9679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.linneus.com"] [uri "/.env"] [unique_id "aSUNPS8VKXrDzM9x9A-g2gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
