🇺🇸
TPI-Abuse
2026-06-11 16:56:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:56:25.705943 2026] [security2:error] [pid 24992:tid 24992] [client 102.98.101.207:60667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownlegacy.org"] [uri "/.env"] [unique_id "airouR1tObn122-PIctdQwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:53:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:53:27.386505 2026] [security2:error] [pid 21213:tid 21213] [client 102.98.101.207:56886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blosoms.org"] [uri "/.env"] [unique_id "airZ97F4gMLbCyMpvpMfywAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-11 15:14:37
(1 day ago)
Web vulnerability probing: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:59:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:59:32.673089 2026] [security2:error] [pid 9605:tid 9605] [client 102.98.101.207:62259] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brushmileage.org"] [uri "/.env"] [unique_id "airNVHzRmdAzhrmfXQpvkAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:38:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:38:27.416008 2026] [security2:error] [pid 25838:tid 25838] [client 102.98.101.207:62878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brauerfamily.org"] [uri "/.env"] [unique_id "airIY3U8fQ2qLhr_zIGZ3AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:00:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:00:02.430945 2026] [security2:error] [pid 14100:tid 14100] [client 102.98.101.207:58539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bipocmentalhealthcoalition.org"] [uri "/.env"] [unique_id "aiq_YrVjLYDVFJCxvbYfOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 15:24:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 11:24:13.067663 2026] [security2:error] [pid 3363:tid 3363] [client 102.98.101.207:55796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "difusionens.org"] [uri "/.env"] [unique_id "aimBnQ_guPeJ7ddVsxZ7lAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 14:31:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:31:33.303008 2026] [security2:error] [pid 14736:tid 14763] [client 102.98.101.207:54287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amphoracollectors.org"] [uri "/.env"] [unique_id "ail1RRFaMDmh39OWRjZ8cQAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 14:04:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 10:04:26.530743 2026] [security2:error] [pid 14000:tid 14000] [client 102.98.101.207:56141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.org"] [uri "/.env"] [unique_id "ailu6gbmJ042Dsytway4PQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 13:28:58
(2 days ago)
(caddyscan) Scanner path probe from 102.98.101.207 (MA/Morocco/-): 5 in the last 3600 secs; Ports: * ...
show more
(caddyscan) Scanner path probe from 102.98.101.207 (MA/Morocco/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 102.98.101.207 - - [10/Jun/2026:13:12:49 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 102.98.101.207 - - [10/Jun/2026:13:28:32 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 102.98.101.207 - - [10/Jun/2026:13:28:40 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 102.98.101.207 - - [10/Jun/2026:13:28:47 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 102.98.101.207 - - [10/Jun/2026:13:28:56 +0000] "GET /.env HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-10 13:22:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 09:22:28.569189 2026] [security2:error] [pid 15629:tid 15629] [client 102.98.101.207:56230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bernabeu.org"] [uri "/.env"] [unique_id "aillFDlarJPZMToeJ1aANwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 13:06:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.101.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 09:06:32.465863 2026] [security2:error] [pid 23771:tid 23771] [client 102.98.101.207:54412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanacademyofteachersofsinging.org"] [uri "/.env"] [unique_id "ailhWO8U60JyT7FBlvcRHwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack