🇫🇷
ELYAZ
2026-07-03 20:51:12
(15 hours ago)
(y4) Failed scan -byebye- from 65.111.3.143 (US/United States/-): (CF_ENABLE)
Hacking
🇩🇪
Mr-Money
2026-05-06 04:04:39
(1 month ago)
65.111.3.143 - - [06/May/2026:06:04:38 +0200] "GET http://176.9.100.87/core/.env HTTP/1.1" 404 381 " ...
show more
65.111.3.143 - - [06/May/2026:06:04:38 +0200] "GET http://176.9.100.87/core/.env HTTP/1.1" 404 381 "-" "curl/8.7.1"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 02:38:52
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:38:47.608170 2026] [security2:error] [pid 365677:tid 365677] [client 65.111.3.143:34263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/dev/.git/config"] [unique_id "aY09N_zIOilX3egy7dO0iQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 06:31:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:31:32.901337 2026] [security2:error] [pid 25901:tid 25901] [client 65.111.3.143:56911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilandman.com"] [uri "/backup/.git/config"] [unique_id "aYrQxACsNq4Do7S-Kmb8iwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:44:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:44:39.695313 2026] [security2:error] [pid 9089:tid 9089] [client 65.111.3.143:23399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "klingandi.com"] [uri "/new/.git/config"] [unique_id "aYq3t0PgA6m58iIDF_7ZrwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:09:15
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:09:09.339553 2026] [security2:error] [pid 2960:tid 2960] [client 65.111.3.143:18115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iceofparadise.com"] [uri "/dev/.git/config"] [unique_id "aYqvZVuN9-e5bZlg6g_3twAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 01:41:46
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:41:27.376064 2026] [security2:error] [pid 29406:tid 29406] [client 65.111.3.143:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/wp/.git/config"] [unique_id "aYqMx_h2aSEhpF075wl_nQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:05:10
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:05:04.711793 2026] [security2:error] [pid 2123063:tid 2123063] [client 65.111.3.143:24459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentsavagelaw.com"] [uri "/backend/.env"] [unique_id "aYp2MOWOGqX38DAJo8TniwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:55:53
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:55:46.924668 2026] [security2:error] [pid 878609:tid 878652] [client 65.111.3.143:12369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howilearnedtodanceintherain.com"] [uri "/api/.env"] [unique_id "aYpl8ol0Zv13If8rJtjqXQAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 22:02:10
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:01:56.233281 2026] [security2:error] [pid 682:tid 682] [client 65.111.3.143:9379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katharinanitzpon.com"] [uri "/api/.git/config"] [unique_id "aYpZVMekEIho11JyqJPO9QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 21:09:12
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:08:41.013889 2026] [security2:error] [pid 22892:tid 22892] [client 65.111.3.143:38921] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karenbernsteinlaw.net"] [uri "/site/.git/config"] [unique_id "aYpM2cVrwF3fp39CeCblfAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-09 20:45:15
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:45:04.457796 2026] [security2:error] [pid 25395:tid 25395] [client 65.111.3.143:43711] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honnwong.com"] [uri "/backend/.env"] [unique_id "aYpHUF_PpSplz0gevO6kIAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-21 15:03:17
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 21 10:03:10.482083 2026] [security2:error] [pid 30997:tid 30997] [client 65.111.3.143:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perl-photo.com"] [uri "/.svn/wc.db"] [unique_id "aXDqrpZpND_sqkhetQ5fyQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-20 21:48:14
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
2026-01-10 17:11:58
(5 months ago)
wordpress-trap
Web App Attack