🇫🇷
Sklurk
2026-07-09 00:59:33
(1 day ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:41:09
(2 days ago)
Web App Attack
Web App Attack
🇧🇪
cmbplf
2026-05-28 23:32:45
(1 month ago)
1.268 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
2026-03-19 07:27:02
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-27 22:15:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:15:00.331185 2025] [security2:error] [pid 10381:tid 10381] [client 65.111.1.59:43045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hodlmoser.com"] [uri "/.svn/wc.db"] [unique_id "aSjNZIHzvvcaBqKFIp_yewAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 21:36:08
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 16:36:00.515819 2025] [security2:error] [pid 13576:tid 13576] [client 65.111.1.59:9665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fgrotary.org"] [uri "/.svn/wc.db"] [unique_id "aSjEQByyXS3CzJfmeDwP3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 10:27:19
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:27:14.619564 2025] [security2:error] [pid 14284:tid 14293] [client 65.111.1.59:58683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.drronaldhecker.com"] [uri "/.git/HEAD"] [unique_id "aSbWAslx4MjOenhn71ffLwAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 09:58:21
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:58:13.221706 2025] [security2:error] [pid 7024:tid 7024] [client 65.111.1.59:14239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tevalaur.com"] [uri "/.env"] [unique_id "aSbPNRmo0JiVaG3Cmkpx0gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇸
Smel
2025-11-26 05:22:21
(7 months ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 03:26:36
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:26:31.034526 2025] [security2:error] [pid 13072:tid 13072] [client 65.111.1.59:15011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.naturessecretresort.com"] [uri "/.svn/wc.db"] [unique_id "aSZzZ0XlPrmiUEnbOS1YLwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:35:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:35:09.522844 2025] [security2:error] [pid 21507:tid 21507] [client 65.111.1.59:58447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danzadance.info"] [uri "/.env"] [unique_id "aSZZTZ22CkuK8htGQ1Nj9wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:05:38
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:05:34.560746 2025] [security2:error] [pid 29378:tid 29378] [client 65.111.1.59:27127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxwetdenim.grayhost.net"] [uri "/.git/HEAD"] [unique_id "aSZSXrktZmx0GVVcRoEpIwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-25 22:28:47
(7 months ago)
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ...
show more
Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing.
show less
Web App Attack
2025-11-25 03:33:41
(7 months ago)
65.111.1.59 - - [25/Nov/2025:03:33:40 +0000] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (X11; Lin ...
show more
65.111.1.59 - - [25/Nov/2025:03:33:40 +0000] "GET /.env HTTP/1.1" 404 360 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:34:13
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.1.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:34:07.850917 2025] [security2:error] [pid 17411:tid 17411] [client 65.111.1.59:10871] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.viacarduccichicago.com"] [uri "/.git/HEAD"] [unique_id "aSQmjyl6cG1bE-jgeh3jzQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack