🇪🇸
alferez
2026-06-03 21:43:30
(1 day ago)
Searching hacked php files
Hacking
Exploited Host
Web App Attack
🇦🇺
2000cn.com.au
2026-05-19 15:56:45
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇨🇭
4server
2026-05-04 11:38:58
(1 month ago)
[MonMay0413:38:54.3907362026][security2:error][pid1212284:tid1212453][client65.111.11.83:0]ModSecuri ...
show more
[MonMay0413:38:54.3907362026][security2:error][pid1212284:tid1212453][client65.111.11.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.4-server.com\"][uri\"/.env\"][unique_id\"afiFTlwl0LzL3e_tye9QZAAAAAg\"]
show less
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-05-01 05:47:41
(1 month ago)
Try to access /.aws/credentials
Web App Attack
🇦🇺
MAGIC
2026-04-03 01:18:52
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-03-24 02:52:26
(2 months ago)
Forum/form spam
Web Spam
2026-03-05 04:10:22
(3 months ago)
Forum/form spam
Web Spam
2026-03-04 09:50:09
(3 months ago)
XMLRPC BRUTEFORCE - HTTP (Request)
Hacking
🇺🇸
TPI-Abuse
2026-02-13 09:10:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:10:20.201230 2026] [security2:error] [pid 7197:tid 7242] [client 65.111.11.83:54421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metropaint.net"] [uri "/admin/.git/config"] [unique_id "aY7qfPIjH9zi8vN_SqEqngAAAcw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:44:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:43:51.938105 2026] [security2:error] [pid 9787:tid 9787] [client 65.111.11.83:46273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meshbagsandmore.com"] [uri "/frontend/.env"] [unique_id "aY7kR7wb1Ct4ETZKKNiZUwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:45:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:45:44.762840 2026] [security2:error] [pid 11737:tid 11737] [client 65.111.11.83:30471] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medgi.co"] [uri "/frontend/.env"] [unique_id "aY7ImLg0KYeUR5ZhF_asiQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:19:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:19:49.918155 2026] [security2:error] [pid 24838:tid 24838] [client 65.111.11.83:56923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matthewhestad.help"] [uri "/app/.env"] [unique_id "aY60dfQiQl6zJuu4AjPDHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:39:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:39:08.650948 2026] [security2:error] [pid 2403886:tid 2403886] [client 65.111.11.83:11797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "masalamadrid.com"] [uri "/app/.git/config"] [unique_id "aY6q7I8aPsLEywYoYoo_fwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:20:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:20:15.398786 2026] [security2:error] [pid 20236:tid 20236] [client 65.111.11.83:32697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martaaizenman.com"] [uri "/admin/.git/config"] [unique_id "aY6mf-RVxkh99eLRnqcCJgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:47:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.11.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:47:41.899121 2026] [security2:error] [pid 2670:tid 2670] [client 65.111.11.83:13647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manichri.com"] [uri "/config/.env"] [unique_id "aY6QzUh4igWgmpbf-CePjwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack