🇫🇷
masterguru
2026-04-02 21:07:43
(2 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.22.209 (GB/United Kingdom/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.22.209 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193)
show less
Hacking
🇺🇸
TPI-Abuse
2026-02-13 13:43:03
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:42:58.785507 2026] [security2:error] [pid 24580:tid 24580] [client 65.111.22.209:57583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindforestmovie.com"] [uri "/.env.local"] [unique_id "aY8qYuCId-YbEDMNRt9migAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:00:09
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:00:04.460144 2026] [security2:error] [pid 24515:tid 24515] [client 65.111.22.209:22929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "melton.space"] [uri "/.env"] [unique_id "aY7aBI-bw_3ccK9vCA0QdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 06:12:22
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:12:14.790872 2026] [security2:error] [pid 2354650:tid 2354650] [client 65.111.22.209:25041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcgmcg.com"] [uri "/frontend/.env"] [unique_id "aY7AvmMy6qLmCgymK3JiaAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 05:15:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:15:32.007861 2026] [security2:error] [pid 2431819:tid 2431819] [client 65.111.22.209:58325] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matronasoy.com"] [uri "/backup/.git/config"] [unique_id "aY6zdKr5bWgm6J1EXdagCQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:31:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:31:28.830151 2026] [security2:error] [pid 9180:tid 9180] [client 65.111.22.209:18675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marxistphilosophy.org"] [uri "/.env.production"] [unique_id "aY6pIHrERl34ow8OPPRYKgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:43:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:43:39.685099 2026] [security2:error] [pid 28168:tid 28168] [client 65.111.22.209:64973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marionenv.com"] [uri "/dev/.git/config"] [unique_id "aY6d67CEY6K7iJ0QJvtA6QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:28:09
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:28:03.709311 2026] [security2:error] [pid 28981:tid 28981] [client 65.111.22.209:12659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mamasquad.com"] [uri "/admin/.env"] [unique_id "aY6MM4rIYCE2dB8Ld-1G4AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 01:18:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:18:06.495557 2026] [security2:error] [pid 17773:tid 17773] [client 65.111.22.209:59819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magicalgirlcrafts.com"] [uri "/app/.env"] [unique_id "aY57zjipmWZ_SYCNAQb3SQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-12 00:36:06
(3 months ago)
65.111.22.209 - - [12/Feb/2026:00:36:05 +0000] "GET /admin/.git/config HTTP/1.1" 302 3409 "-" "Mozil ...
show more
65.111.22.209 - - [12/Feb/2026:00:36:05 +0000] "GET /admin/.git/config HTTP/1.1" 302 3409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-01-03 13:34:03
(5 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
(5 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ...
show more
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
show less
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
TPI-Abuse
2025-11-24 07:52:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:50:01.983277 2025] [security2:error] [pid 132008:tid 132031] [client 65.111.22.209:19559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.selfhelpbook.aafm.us"] [uri "/.env"] [unique_id "aSQOKQH-XN5lTt6cMbdPqgAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:53:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:53:19.698472 2025] [security2:error] [pid 30666:tid 30666] [client 65.111.22.209:41241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.eagrant.com"] [uri "/.git/HEAD"] [unique_id "aSPkvwmq3KGcNYvAKkzGcAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:08:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.22.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:08:33.514204 2025] [security2:error] [pid 4630:tid 4640] [client 65.111.22.209:42557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lasertagandgames.com"] [uri "/.env"] [unique_id "aSPaQacxawx_aukreZu0OwAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack