🇩🇪
LRob
2026-08-18 20:18:32
(6 days ago)
WordPress probing | req: /xmlrpc.php | UA: PHP/6.3.75
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-31 02:25:38
(3 weeks ago)
Web App Attack
Web App Attack
🇮🇹
[email protected]
2026-07-21 18:59:26
(1 month ago)
2026-07-21 20:58:31,616 fail2ban.actions [1143]: NOTICE [apache-auth] Ban 65.111.5.1802026-0 ...
show more
2026-07-21 20:58:31,616 fail2ban.actions [1143]: NOTICE [apache-auth] Ban 65.111.5.1802026-07-21 20:58:43,636 fail2ban.actions [1143]: NOTICE [wordpress] Ban 65.111.5.180
show less
Brute-Force
🇲🇽
octageeks.com
2026-07-09 04:18:35
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
FeG Deutschland
2026-07-06 21:11:57
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
lostswordfish.com
2026-07-05 20:58:03
(1 month ago)
Wordfence waf block on decarcerationnation
Web App Attack
🇩🇪
LRob
2026-06-24 01:45:08
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-04-05 17:13:25
(4 months ago)
Forum/form spam
Web Spam
2026-03-04 13:04:50
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-13 08:56:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:56:19.396396 2026] [security2:error] [pid 5220:tid 5220] [client 65.111.5.180:64575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lambdaclimateresearch.com"] [uri "/.env.staging"] [unique_id "aY7nMyW7bZY0vV7I_n48bgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:36:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:35:53.229387 2026] [security2:error] [pid 9848:tid 9868] [client 65.111.5.180:10297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lagifthouse.com"] [uri "/app/.git/config"] [unique_id "aY7iaQNSj6L_UZomF0GWFgAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:12:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:12:08.404298 2026] [security2:error] [pid 13964:tid 13964] [client 65.111.5.180:36181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.env"] [unique_id "aY7c2MNb2Qb7PASU1ZRO1gAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:13:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:13:17.904804 2026] [security2:error] [pid 18553:tid 18553] [client 65.111.5.180:36699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koshland.org"] [uri "/new/.git/config"] [unique_id "aY7A_aS9SKQpvGu2r7AbSwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:53:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:53:27.919242 2026] [security2:error] [pid 31962:tid 31962] [client 65.111.5.180:38509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/backup/.git/config"] [unique_id "aY68V1Xx0BvUtnCt6dF4fQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:50:54
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:50:50.488244 2026] [security2:error] [pid 2525978:tid 2525978] [client 65.111.5.180:20487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrywood.com"] [uri "/.env.production"] [unique_id "aY6RingTZkU4grurXJ0X9QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack