🇨🇭
backslash
2026-05-23 05:15:02
(1 week ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-24 09:03:32
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 04:03:28.415128 2026] [security2:error] [pid 30852:tid 30852] [client 65.111.9.154:62215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonrcortright.com.lmffl.com"] [uri "/.git/config"] [unique_id "aZ1pYKiIRDjfMKTXCw-TQQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 01:41:01
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 20:40:57.523451 2026] [security2:error] [pid 28174:tid 28184] [client 65.111.9.154:22625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stewardship360.property-management-companies-chicago.com"] [uri "/.git/config"] [unique_id "aZ0BqcmIe1mQq3HNPOtLSwAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 14:37:02
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 09:36:56.305518 2026] [security2:error] [pid 32677:tid 32677] [client 65.111.9.154:25043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hid.ficklepassionproductions.com"] [uri "/.git/config"] [unique_id "aZxmCHQFQKJlzCflZbVUTgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-19 16:48:47
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12.5; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-12-04 18:48:04
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-24 06:48:06
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:47:54.730482 2025] [security2:error] [pid 10232:tid 10232] [client 65.111.9.154:59153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.studio716.info"] [uri "/.svn/wc.db"] [unique_id "aSP_mp78PGjBrDFImDfzfQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:32:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:32:17.801148 2025] [security2:error] [pid 13761:tid 13761] [client 65.111.9.154:39893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.suedblick.com"] [uri "/.svn/wc.db"] [unique_id "aSP78bXpx05q53VOj0A6xQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:38:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:38:20.777722 2025] [security2:error] [pid 20781:tid 20781] [client 65.111.9.154:12275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cayman-islands-real-estate.com"] [uri "/.svn/wc.db"] [unique_id "aSPvTJyU2Nfblq-RChN-BgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 05:08:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:07:58.372429 2025] [security2:error] [pid 3965261:tid 3965323] [client 65.111.9.154:14219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.anglicancommission.com"] [uri "/.env"] [unique_id "aSPoLh7XGNzpCBYjvUvx5QAAAlg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:49:49
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:32.769056 2025] [security2:error] [pid 8996:tid 8996] [client 65.111.9.154:25545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.accredo.net"] [uri "/.svn/wc.db"] [unique_id "aSPj3FCXqlUoKtiVSFcH6wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:32:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.9.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:52.864716 2025] [security2:error] [pid 17281:tid 17281] [client 65.111.9.154:21429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.faeriefeelers.com"] [uri "/.git/HEAD"] [unique_id "aSPf9OpTz7wbiqSj2ixgUAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 08:56:02
(6 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
nowyouknow
2025-11-16 22:34:47
(6 months ago)
(From [email protected] ) The Hidden Goldmine gets people in front of 5,000,000+ buyers that pay o ...
show more
(From [email protected] ) The Hidden Goldmine gets people in front of 5,000,000+ buyers that pay over and over again all while AI takes care of all of the “work”.
https://bookmarket.expert/TheHiddenGoldmine
to UNSUBSCRIBE:
https://bookmarket.expert/unsubscribe?domain=commonwealthfamilyhealthcare.com
Address: 108 West Street Comstock Park, MI 48721
show less
Phishing
Web Spam
2025-11-14 07:16:51
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack