🇫🇷
Sklurk
2026-09-01 06:06:15
(1 day ago)
Web App Attack
Web App Attack
🇮🇩
Burayot
2026-07-20 17:19:45
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.7.179 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.7.179 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-11 06:19:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 02:19:36.265252 2026] [security2:error] [pid 19438:tid 19438] [client 65.111.7.179:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hondabvi.com"] [uri "/.svn/wc.db"] [unique_id "agF0-CUf46k_-vDaoVsaKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-01 04:49:43
(6 months ago)
Forum/form spam
Web Spam
2026-01-16 14:30:17
(7 months ago)
wordpress-trap
Web App Attack
2025-12-10 17:42:38
(8 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 06:40:48
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:40:41.002153 2025] [security2:error] [pid 7157:tid 7157] [client 65.111.7.179:29635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hillconsultants.com"] [uri "/.git/HEAD"] [unique_id "aSag6Ub0v52V6FeLT9N9QQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:25:16
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:25:11.046348 2025] [security2:error] [pid 26926:tid 26926] [client 65.111.7.179:25683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sekel.org"] [uri "/.env"] [unique_id "aSaPN_QvZkedeb3F3ORTCwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 01:03:33
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:03:30.872077 2025] [security2:error] [pid 9053:tid 9053] [client 65.111.7.179:22729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kinareemagazine.thephysicsroom.com"] [uri "/.env"] [unique_id "aSZR4un5hY4bYcaOHMTmcwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 00:04:02
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:03:58.258654 2025] [security2:error] [pid 22106:tid 22106] [client 65.111.7.179:19739] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lemobba.com"] [uri "/.svn/wc.db"] [unique_id "aSZD7nfVHomzBqV_Ai0O6gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-24 20:24:11
(9 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 07:49:22
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:49:15.704695 2025] [security2:error] [pid 31989:tid 31989] [client 65.111.7.179:49705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fractalsky.com"] [uri "/.env"] [unique_id "aSQN-0dvE1tdLApyyDeZAwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:43:46
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:43:39.305542 2025] [security2:error] [pid 27699:tid 27699] [client 65.111.7.179:33433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.dceabronwilliams.com"] [uri "/.env"] [unique_id "aSP-m4M_SqBrFniQxmK0rAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-10 00:08:03
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.7.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 19:07:59.871518 2025] [security2:error] [pid 9546:tid 9546] [client 65.111.7.179:39563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caferutadelaseda.com"] [uri "/.env"] [unique_id "aREs36yCZ44xKpdrNBNt_wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fbarela
2025-11-07 22:01:02
(9 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force