🇫🇷
masterguru
2026-04-06 01:58:11
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.20.204 (BR/Brazil/-): 1 in the last 360 ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.20.204 (BR/Brazil/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇺🇸
TPI-Abuse
2026-02-20 06:21:23
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 01:21:19.653857 2026] [security2:error] [pid 7687:tid 7687] [client 65.111.20.204:13921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wild-goose.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wild-goose.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZf9X3_mf09jwOkoPb7regAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-02-15 06:25:46
(3 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-12 02:38:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:38:19.685685 2026] [security2:error] [pid 366153:tid 366153] [client 65.111.20.204:36535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/frontend/.env"] [unique_id "aY09G6PBuToVIlWGTVE5FAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 19:48:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:48:51.979546 2026] [security2:error] [pid 574450:tid 574450] [client 65.111.20.204:56737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archief.org"] [uri "/frontend/.env"] [unique_id "aYzdIzAHZ_SpUk8sUMxM4AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:30:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:30:03.855128 2026] [security2:error] [pid 16295:tid 16295] [client 65.111.20.204:23665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/.env.staging"] [unique_id "aYrCW8QdrbB08hIgb1qoGwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-10 02:25:53
(3 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
myagent.site
2026-02-09 23:39:33
(3 months ago)
Blocking for trying to access an exploit file: /dev/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-09 23:03:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:03:34.402445 2026] [security2:error] [pid 11582:tid 11582] [client 65.111.20.204:23949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howwegothere.info"] [uri "/app/.git/config"] [unique_id "aYpnxi0f3YDOzupqvsZw2gAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:51:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:51:49.918183 2026] [security2:error] [pid 2140:tid 2140] [client 65.111.20.204:43023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hooks-n-hearts.com"] [uri "/.env"] [unique_id "aYpI5YvW1WHAaHuPdqFrhgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:19:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.20.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:19:42.217975 2026] [security2:error] [pid 10515:tid 10515] [client 65.111.20.204:18713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kampinenlaw.com"] [uri "/test/.git/config"] [unique_id "aYpBXqxhH_dvYm_eifZCLwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-06 09:22:25
(4 months ago)
SPROVFR WEBFORM SPAM 65.111.20.204 (65.111.20.204)
Web Spam
🇫🇷
France Artisanat
2026-02-04 00:26:06
(4 months ago)
Ready to drive targeted visitors to your France Artisanat Fr site? This quick video explains how our ...
show more
Ready to drive targeted visitors to your France Artisanat Fr site? This quick video explains how our AI works: https://www.youtube.com/shorts/2tosLZXrvCA
show less
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:00:48
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇮🇩
BPS-StatisticsIndonesia
2025-12-02 03:33:15
(6 months ago)
WP Login Scan Activities
Web App Attack