2026-07-27 10:21:18
(45 minutes ago)
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show more
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
Brute-Force
Web App Attack
🇩🇪
georgengelmann
2026-07-26 05:31:18
(1 day ago)
Failed login attempt for admin
Brute-Force
Web App Attack
2026-07-23 06:41:29
(4 days ago)
WordPress Brute Force
Brute-Force
🇫🇷
Sklurk
2026-07-16 12:16:28
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-13 07:10:57
(2 weeks ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-07-12 04:54:18
(2 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:30:22
(2 weeks ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-06-23 04:15:49
(1 month ago)
Web App Attack
Web App Attack
🇮🇩
RasyiidWho
2026-02-21 20:38:28
(5 months ago)
ip112.20 . 65.111.3.135 - - [22/Feb/2026:03:38:27 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "https ...
show more
ip112.20 . 65.111.3.135 - - [22/Feb/2026:03:38:27 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Brute-Force
Port Scan
Bad Web Bot
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-02-13 05:16:40
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:16:36.967095 2026] [security2:error] [pid 2353998:tid 2353998] [client 65.111.3.135:54641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kneupper.com"] [uri "/config/.env"] [unique_id "aY6ztL8X7u-qT9USnXQ6nwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:58:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:58:45.674416 2026] [security2:error] [pid 2626764:tid 2626764] [client 65.111.3.135:49501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klfreeman.com"] [uri "/admin/.env"] [unique_id "aY6vhRvlPtxLdsNlLNog1AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 03:26:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:26:04.226357 2026] [security2:error] [pid 11946:tid 11946] [client 65.111.3.135:34425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/config/.env"] [unique_id "aY6ZzAkLV5OltwdwI_Iw2wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:07:36
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:07:29.934192 2026] [security2:error] [pid 9583:tid 9583] [client 65.111.3.135:10167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kdgsf.xyz"] [uri "/app/.env"] [unique_id "aY6HYY4kesENFXJd4yVYLwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-13 01:31:27
(5 months ago)
Blocking for trying to access an exploit file: /dev/.git/config
Hacking
🇺🇸
TPI-Abuse
2026-02-13 00:48:24
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 19:48:19.267669 2026] [security2:error] [pid 13438:tid 13438] [client 65.111.3.135:60215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airplanechristmascards.com"] [uri "/.git/config"] [unique_id "aY5001Smi6fsDLSRA0Cp_gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack