🇩🇪
LRob.fr
2026-05-02 17:15:09
(1 month ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-03-24 14:07:10
(2 months ago)
Forum/form spam
Web Spam
🇱🇻
garmtech.com
2026-03-16 20:23:08
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-23.65.111.7.14.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-23.65.111.7.14.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇬🇧
relianoid.com
2026-03-10 01:37:02
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇱🇻
garmtech.com
2026-03-01 14:14:58
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-14.65.111.7.14.web-spammers ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-14.65.111.7.14.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-02-12 22:59:06
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-12
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-12 02:39:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:39:24.613998 2026] [security2:error] [pid 367092:tid 367092] [client 65.111.7.14:61051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/backup/.git/config"] [unique_id "aY09XCQc_YfpiJcIB55vBgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 23:15:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 18:15:22.687799 2026] [security2:error] [pid 28399:tid 28399] [client 65.111.7.14:58575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arizonachristmascards.com"] [uri "/api/.git/config"] [unique_id "aY0NitVotm-JmAL5iTRfIwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
ketovoila.pl
2026-02-10 00:51:23
(3 months ago)
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/api/.git/config; UA=Mozill ...
show more
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=ketovoila.pl/api/.git/config; UA=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36; window=2026-02-10T00:29:13Z..2026-02-10T00:29:13Z
show less
Port Scan
Hacking
Brute-Force
🇬🇧
Swiptly
2026-02-10 00:07:48
(3 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:05:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:05:28.825073 2026] [security2:error] [pid 1635518:tid 1635518] [client 65.111.7.14:33503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentuckyminiaturehorsebreeders.org"] [uri "/.env.staging"] [unique_id "aYp2SAMIAT2wab4AfOzG5AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-09 20:06:14
(3 months ago)
Blocking for trying to access an exploit file: /.env.staging
Hacking
🇺🇸
TPI-Abuse
2026-02-09 19:59:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:59:36.398863 2026] [security2:error] [pid 18448:tid 18448] [client 65.111.7.14:13359] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homenetserv.com"] [uri "/backup/.git/config"] [unique_id "aYo8qEY3Qkljw4mQadnqCwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-02 02:47:05
(4 months ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 200373)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-07 23:20:20
(4 months ago)
WP Login Scan Activities
Web App Attack