🇮🇩
Burayot
2026-08-14 19:59:56
(1 week ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.4.4 (US/United States/-): 1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.4.4 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
2025-12-02 14:47:10
(8 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 03:19:05
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:19:01.425807 2025] [security2:error] [pid 17799:tid 17799] [client 65.111.4.4:52339] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intermixxnet.independentmusicconference.com"] [uri "/.git/HEAD"] [unique_id "aSZxpXzpw42e4Ve442uKFwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 06:12:36
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:12:28.942121 2025] [security2:error] [pid 12199:tid 12199] [client 65.111.4.4:37017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thelastnoel.com"] [uri "/.git/HEAD"] [unique_id "aSVIzB1uCYPd3akI8bDS8wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:43:45
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:43:41.961884 2025] [security2:error] [pid 18069:tid 18069] [client 65.111.4.4:16447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.zodiacgate.com"] [uri "/.svn/wc.db"] [unique_id "aSUz_e-kTvTimVjFTQDl9gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:18:05
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:17:56.833287 2025] [security2:error] [pid 6322:tid 6322] [client 65.111.4.4:27087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cultiplant.com.menagri.com"] [uri "/.env"] [unique_id "aSUt9KE-gKURbhWxELi6jAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:49:55
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:49:27.236854 2025] [security2:error] [pid 4231:tid 4231] [client 65.111.4.4:37627] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taylorandatlantic.net"] [uri "/.git/HEAD"] [unique_id "aSUnR5kO6hilWLTWHPGscAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 01:39:06
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:39:01.739928 2025] [security2:error] [pid 4527:tid 4527] [client 65.111.4.4:54043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wordscount.biz"] [uri "/.svn/wc.db"] [unique_id "aSUItTsku8TO8EruxPVJ-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:22:21
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:22:17.900150 2025] [security2:error] [pid 26679:tid 26679] [client 65.111.4.4:44919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.g-peopleland.com"] [uri "/.git/HEAD"] [unique_id "aST2ueVaHIdUpU3Caai6wgAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:04:12
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:03:47.892374 2025] [security2:error] [pid 12395:tid 12395] [client 65.111.4.4:23435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.janaia.com"] [uri "/.svn/wc.db"] [unique_id "aSQRY8R3wmJGn9sgLx-NhAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:10:26
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:10:21.331204 2025] [security2:error] [pid 6495:tid 6495] [client 65.111.4.4:19923] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.georgesmarina.com"] [uri "/.svn/wc.db"] [unique_id "aSQE3c4jjtjOvUeBORQb-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:27:58
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:27:51.175142 2025] [security2:error] [pid 31514:tid 31514] [client 65.111.4.4:31447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dunbartonucc.org"] [uri "/.svn/wc.db"] [unique_id "aSP65_S06nSIQLS4ZWIQNAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:48:17
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:48:12.095611 2025] [security2:error] [pid 17187:tid 17187] [client 65.111.4.4:14801] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.brtc.us"] [uri "/.svn/wc.db"] [unique_id "aSPjjE_HYEegXWK1GLKj0gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:21:34
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.4.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:21:22.661871 2025] [security2:error] [pid 3273:tid 3273] [client 65.111.4.4:30629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.livingwaterresortandspa.com"] [uri "/.svn/wc.db"] [unique_id "aSPdQsuRlfP7zfUUoUKzDwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-19 08:52:33
(9 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host