🇫🇷
Sklurk
2026-06-11 11:50:09
(1 day ago)
Web App Attack
Web App Attack
🇨🇳
ThreatBook.io
2026-05-02 22:16:44
(1 month ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.12.237
2026-05-02 03 ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.12.237
2026-05-02 03:22:51 /config/config.xml
2026-05-02 03:22:47 /console/login/LoginForm.jsp
2026-05-02 03:22:48 /weblogic/ready
2026-05-02 03:22:50 /management/tenant-monitoring/servers
2026-05-02 03:22:53 /wls-wsat/CoordinatorPortType
show less
Web App Attack
🇺🇸
WizardsToolkit
2026-04-20 14:23:35
(1 month ago)
attempted to access /techwizard_backup.sql
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-04-13 14:04:48
(1 month ago)
Attempts against HTTP/HTTPS
Web App Attack
🇺🇸
nowyouknow
2026-02-02 17:50:23
(4 months ago)
(From [email protected] ) Hello,
We are Broadtrade Group and are currently seeking q ...
show more
(From [email protected] ) Hello,
We are Broadtrade Group and are currently seeking qualified vendors, partners, and leadership consultants for an active project in investment trading and project supply.
Interested parties are kindly invited to respond with a brief profile and contact details for further discussion.
Kind regards,
Daniel Cai
Broadtrade Group
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2026-01-30 02:26:37
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 29 21:26:32.018833 2026] [security2:error] [pid 1824522:tid 1824522] [client 65.111.12.237:39493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXwW2HMjI7Id10BQALWaWQAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-01-19 02:09:42
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2025-12-24 05:07:34
(5 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇮🇹
VHosting
2025-12-23 10:48:30
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-12-03 03:39:40
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 06:15:19
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:15:09.584286 2025] [security2:error] [pid 27667:tid 27667] [client 65.111.12.237:49101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cgiaquaticcare.com"] [uri "/.git/HEAD"] [unique_id "aSVJbXLZKBmiXfQ5Ln8PTgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:23:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:22:57.252769 2025] [security2:error] [pid 17849:tid 17849] [client 65.111.12.237:41535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.aaronbeg.com"] [uri "/.env"] [unique_id "aSU9MZdv7wpC6DQUS64gxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:46:33
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:46:28.034841 2025] [security2:error] [pid 11522:tid 11522] [client 65.111.12.237:37687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.debzy.com"] [uri "/.env"] [unique_id "aSU0pGuPqFTN-TzF60PDmwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:26:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:26:26.268619 2025] [security2:error] [pid 1817000:tid 1817030] [client 65.111.12.237:36667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.anglicancommission.com"] [uri "/.git/HEAD"] [unique_id "aSUv8piXM9qjzOaPIgQnZgAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:10:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.12.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:10:24.850193 2025] [security2:error] [pid 22610:tid 22610] [client 65.111.12.237:17685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lmjetservices.com"] [uri "/.env"] [unique_id "aSUeIHRfxRBn9R1Szb1cUgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack