🇫🇷
Sklurk
2026-07-29 02:24:33
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-09 00:54:40
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:38:52
(1 month ago)
Web App Attack
Web App Attack
🇱🇻
garmtech.com
2026-06-10 07:50:51
(2 months ago)
IM360 WAF: Authentication Bypass in Really Simple Security 9.0.0-9.1.1.1 Plugin for WordPress (CVE-2 ...
show more
IM360 WAF: Authentication Bypass in Really Simple Security 9.0.0-9.1.1.1 Plugin for WordPress (CVE-2024-10924)
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-06-01 11:49:57
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇺🇸
S.O.B.A. Dev.
2026-05-07 17:04:35
(3 months ago)
Threat Blocked by BeeHive from (ASN:200373) (Network:3xK Tech GmbH) (Host:soba.dev) (Method:GET) (Pr ...
show more
Threat Blocked by BeeHive from (ASN:200373) (Network:3xK Tech GmbH) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-05-07T17:04:35Z)
show less
Brute-Force
Web Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:58:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:58:26.671671 2026] [security2:error] [pid 1036984:tid 1036984] [client 65.111.23.73:46791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ganeki.com"] [uri "/api/.env"] [unique_id "aYpKckFgcJ7LikGaeY625QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 17:37:39
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:37:32.100976 2026] [security2:error] [pid 32750:tid 32750] [client 65.111.23.73:62313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/new/.git/config"] [unique_id "aYobXMhOxiqa_kYtX6TaVAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 09:39:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:39:39.937821 2026] [security2:error] [pid 31374:tid 31374] [client 65.111.23.73:16127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullyevil.com"] [uri "/site/.git/config"] [unique_id "aYmrWylRK1Uv6IhS89suRwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 06:14:10
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 01:14:07.537050 2026] [security2:error] [pid 9391:tid 9394] [client 65.111.23.73:57653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.co.uk"] [uri "/.env"] [unique_id "aYl7L_s_3pHPOpv8vXVzVgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2026-02-09 01:57:48
(6 months ago)
GET /.env.staging HTTP/1.1
Web App Attack
🇺🇸
OceanTreasure
2026-01-29 10:45:05
(6 months ago)
tcp/80; Leftover installer file probe: "GET //installer.php" @ 2026-01-29T10:38:13Z [proxy]
Brute-Force
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:32
(7 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-10 15:42:50
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 10:42:42.170317 2025] [security2:error] [pid 17007:tid 17007] [client 65.111.23.73:45431] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hockey312.com"] [uri "/.env"] [unique_id "aTmU8pE6YF0RLsRyVSDdUwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 19:18:38
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.23.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 14:18:32.358094 2025] [security2:error] [pid 25203:tid 25203] [client 65.111.23.73:10625] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baselinesc.com"] [uri "/.svn/wc.db"] [unique_id "aTckiMHGkALejkpl_VPXIQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack