🇨🇳
ThreatBook.io
2026-05-10 00:20:44
(1 month ago)
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.3.250
2026-05-09 21: ...
show more
ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.3.250
2026-05-09 21:07:55 /
show less
Web App Attack
2026-02-16 05:44:43
(4 months ago)
2026-02-16T07:44:43.436629+02:00 zanati wp(www.sahpa.co.za)[550696]: Blocked authentication attempt ...
show more
2026-02-16T07:44:43.436629+02:00 zanati wp(www.sahpa.co.za)[550696]: Blocked authentication attempt for [email protected] from 65.111.3.250
...
show less
Web App Attack
🇪🇸
10dencehispahard SL
2026-01-26 12:20:24
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-12-11 04:53:17
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 23:53:10.986873 2025] [security2:error] [pid 24204:tid 24204] [client 65.111.3.250:15375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krukgpt.com"] [uri "/.env"] [unique_id "aTpONqzChmV5NsRwaryYmgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 12:56:51
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 07:56:45.106240 2025] [security2:error] [pid 12579:tid 12579] [client 65.111.3.250:35319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djemjaybeats.com"] [uri "/.env"] [unique_id "aTgcjQvqjkp6zb-IFbjhfAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 03:18:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 22:18:14.608653 2025] [security2:error] [pid 24378:tid 24417] [client 65.111.3.250:34211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatassparty.com"] [uri "/.git/HEAD"] [unique_id "aTeU9vRP0XggZu2H29R3hAAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MirrorImageGaming
2025-12-08 22:55:35
(6 months ago)
80 → 443
GET /.git/HEAD HTTP/1.1 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1 ...
show more
80 → 443
GET /.git/HEAD HTTP/1.1 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 13:48:36
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 08:48:31.966875 2025] [security2:error] [pid 30929:tid 30929] [client 65.111.3.250:52301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keeran.org"] [uri "/.svn/wc.db"] [unique_id "aTWFr_1N4dlU05ISRwhDCAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 12:42:07
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:42:04.633119 2025] [security2:error] [pid 7967:tid 7967] [client 65.111.3.250:14775] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clevelanddental.org"] [uri "/.env"] [unique_id "aTV2HMVN2Nrs5i7ieQRftQAAAHQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 19:11:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 14:11:29.874060 2025] [security2:error] [pid 9484:tid 9484] [client 65.111.3.250:13787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houseofbates.net"] [uri "/.svn/wc.db"] [unique_id "aTR_4UeAzgUgKxo6A1187AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 11:55:13
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:55:07.794353 2025] [security2:error] [pid 17225:tid 17225] [client 65.111.3.250:43383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "viahtml.com"] [uri "/.env"] [unique_id "aTLIGw1AueTOR-QSBfkLbQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 11:21:03
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 06:20:57.715351 2025] [security2:error] [pid 25257:tid 25257] [client 65.111.3.250:47749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "martaaizenman.com"] [uri "/.svn/wc.db"] [unique_id "aTLAGRD79WAyOEkmEjX7jwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 05:59:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 00:59:54.035502 2025] [security2:error] [pid 23186:tid 23186] [client 65.111.3.250:31595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compupackinc.com"] [uri "/.svn/wc.db"] [unique_id "aTJ02kfnJn6ewzPb4rYbMAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 18:20:25
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:20:18.983742 2025] [security2:error] [pid 31009:tid 31009] [client 65.111.3.250:40827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "listings.cruisingforsex.com"] [uri "/.svn/wc.db"] [unique_id "aSdE4lfcI-3skOBa8jWlIQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 09:41:09
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.3.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:41:02.348471 2025] [security2:error] [pid 2445:tid 2445] [client 65.111.3.250:46907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.automatebi.com"] [uri "/.git/HEAD"] [unique_id "aSQoLijb9_4TcbBImmFabQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack