πΊπΈ
TPI-Abuse
2026-02-28 14:28:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 09:28:29.817134 2026] [security2:error] [pid 4828:tid 4828] [client 65.111.13.236:53131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zydecajun.radio.fm"] [uri "/.git/HEAD"] [unique_id "aaL7jXN6lPJs9jlOnFulVwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-12-08 02:50:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 21:50:39.391621 2025] [security2:error] [pid 28048:tid 28048] [client 65.111.13.236:16013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chateau-saleza-bruges.com"] [uri "/.svn/wc.db"] [unique_id "aTY8_8gZXnAy2quGHD7P-AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
jjnxpct
2025-12-07 04:54:41
(6 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.aws/credentials (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2025-12-06 11:02:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:02:04.512445 2025] [security2:error] [pid 6402:tid 6402] [client 65.111.13.236:53781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tjsworld.net"] [uri "/.git/HEAD"] [unique_id "aTQNLOXha5BMvoRnr8YdqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-12-05 08:20:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 03:20:53.382436 2025] [security2:error] [pid 5124:tid 5146] [client 65.111.13.236:46907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miraclearts.com"] [uri "/.env"] [unique_id "aTKV5TOO3av3Wi0EFOxlNAAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-12-05 04:17:43
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 23:17:35.693446 2025] [security2:error] [pid 24109:tid 24109] [client 65.111.13.236:46551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justmakingitbetter.com"] [uri "/.git/HEAD"] [unique_id "aTJc35PNSV9aTFZvZ6cdpAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-26 09:06:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:06:10.697717 2025] [security2:error] [pid 9606:tid 9657] [client 65.111.13.236:32047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seattlebasketballservices.meanmouse.com"] [uri "/.git/HEAD"] [unique_id "aSbDAiFyBWeOsnO3zv5sfwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-26 07:56:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:56:18.428763 2025] [security2:error] [pid 16824:tid 16884] [client 65.111.13.236:34617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.eyedealmedia.com"] [uri "/.env"] [unique_id "aSayos97VZ-sS76jFmx-agAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-26 03:04:14
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:04:07.905399 2025] [security2:error] [pid 8341:tid 8341] [client 65.111.13.236:34779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.modalsoftware.com"] [uri "/.svn/wc.db"] [unique_id "aSZuJ007X6IbUn7YlGqcnwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-24 08:41:35
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:41:29.735194 2025] [security2:error] [pid 13941:tid 13990] [client 65.111.13.236:25437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wasula2.stonyp.com"] [uri "/.svn/wc.db"] [unique_id "aSQaOfSSVFm8noxFLWyMcQAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-24 07:32:04
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:31:49.373691 2025] [security2:error] [pid 18540:tid 18540] [client 65.111.13.236:59677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mycouchwriting.com"] [uri "/.svn/wc.db"] [unique_id "aSQJ5X9PvOSSgL1TuRbHDQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-24 07:14:41
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:14:33.663364 2025] [security2:error] [pid 23910:tid 23910] [client 65.111.13.236:48947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.birdlovesfish.com"] [uri "/.env"] [unique_id "aSQF2d6Ol1hQu8bdSxAEzAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-11-24 04:53:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.13.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:53:51.021608 2025] [security2:error] [pid 18143:tid 18143] [client 65.111.13.236:56949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.expertprofessionalcleaners.com"] [uri "/.svn/wc.db"] [unique_id "aSPk33SDWiQeKqvCau1URwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-11-01 11:55:15
(7 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.01 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.01 is noted in report timestamp
show less
Hacking
Brute-Force
π¨π¦
wil.com
2025-10-29 08:12:33
(7 months ago)
GlobalProtect login attempts with user nshankaralingam.
VPN IP
Brute-Force