🇫🇷
Sklurk
2026-06-23 04:28:14
(21 hours ago)
Web App Attack
Web App Attack
🇦🇺
MAGIC
2026-05-03 01:24:07
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇩🇪
FeG Deutschland
2026-03-21 09:14:33
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇩🇪
stinpriza
2026-02-01 00:05:36
(4 months ago)
Web App Attack
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 12:04:28
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇱🇻
garmtech.com
2026-01-25 16:07:18
(4 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:44
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-29 11:49:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 06:49:29.555032 2025] [security2:error] [pid 25675:tid 25675] [client 65.111.11.149:17977] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bitcoinsquaretrade.com"] [uri "/.git/HEAD"] [unique_id "aVJqycL34mRlhbyhPz8y1AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 07:03:13
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 02:03:07.590320 2025] [security2:error] [pid 2660271:tid 2660295] [client 65.111.11.149:20847] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accutar.com"] [uri "/.env"] [unique_id "aVInq7y5r8TcoL1xTBgTpQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:54:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:54:34.010278 2025] [security2:error] [pid 14268:tid 14268] [client 65.111.11.149:23037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yevid.com"] [uri "/.svn/wc.db"] [unique_id "aVIJirEqiMyK1Hu8zqvbagAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 04:39:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:39:32.785438 2025] [security2:error] [pid 5629:tid 5629] [client 65.111.11.149:9789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morganmotors.com"] [uri "/.git/HEAD"] [unique_id "aVIGBLkA4JoM3Lom5d_8egAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 10:15:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 05:15:15.236074 2025] [security2:error] [pid 18066:tid 18066] [client 65.111.11.149:45011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archaiusmusic.com"] [uri "/.env"] [unique_id "aTf2s1SjbNMih3rnaJWOHQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-07 22:59:57
(6 months ago)
Auto-ban: >3000 req/min op 2025-12-07
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-12-07 18:36:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 13:36:25.615528 2025] [security2:error] [pid 22221:tid 22221] [client 65.111.11.149:17323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wsspy.com"] [uri "/.env"] [unique_id "aTXJKZLbsavUWGgqDKlCcgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack