2026-07-17 20:18:39
(2 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 16:24:35
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:24:32.470968 2026] [security2:error] [pid 12663:tid 12663] [client 102.98.113.127:51618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tcmu.org"] [uri "/.env"] [unique_id "alpXQK2KFB_kuCLlg9KUVAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 14:43:51
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 10:43:48.642159 2026] [security2:error] [pid 19543:tid 19543] [client 102.98.113.127:55190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wethepeoplealliance.org"] [uri "/.env"] [unique_id "alo_pJYGvDMGJNEP--WmQQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
notelseit
2026-07-17 14:20:28
(7 hours ago)
2026-07-17T16:20:22.274033+02:00 mail postfix/submission/smtpd[3073875]: warning: unknown[102.98.113 ...
show more
2026-07-17T16:20:22.274033+02:00 mail postfix/submission/smtpd[3073875]: warning: unknown[102.98.113.127]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
2026-07-17T16:20:28.438666+02:00 mail postfix/submission/smtpd[3073875]: warning: unknown[102.98.113.127]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-07-17T16:20:28.518336+02:00 mail postfix/submission/smtpd[3073875]: disconnect from unknown[102.98.113.127] ehlo=2 starttls=1 auth=0/2 quit=1 commands=4/6
...
show less
Brute-Force
Email Spam
🇮🇩
xveil
2026-07-17 12:24:17
(9 hours ago)
2026-07-17T19:24:14.916419 mail-honeypot postfix/submission/smtpd[18242]: warning: unknown[102.98.11 ...
show more
2026-07-17T19:24:14.916419 mail-honeypot postfix/submission/smtpd[18242]: warning: unknown[102.98.113.127]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-17 07:14:40
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 03:14:34.836311 2026] [security2:error] [pid 459140:tid 459150] [client 102.98.113.127:49423] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wegelin.org"] [uri "/.env"] [unique_id "alnWWtAYVEpg1ybSti_HeAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 04:58:10
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 00:58:03.778697 2026] [security2:error] [pid 4055121:tid 4055121] [client 102.98.113.127:62441] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toepfer.org"] [uri "/.env"] [unique_id "alm2WxHGSV0COzlTRG7alAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 01:50:45
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:50:39.217185 2026] [security2:error] [pid 141273:tid 141273] [client 102.98.113.127:49347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westerncarolinabass.org"] [uri "/.env"] [unique_id "almKbyMMpFpbpl2xpyr2sgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 00:09:46
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 20:09:40.754515 2026] [security2:error] [pid 25215:tid 25215] [client 102.98.113.127:60055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vaxd.org"] [uri "/.env"] [unique_id "allyxDZMHzBDPBamfNJi_wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-16 15:26:40
(1 day ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇺🇸
TPI-Abuse
2026-07-15 23:03:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.113.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 19:03:11.015689 2026] [security2:error] [pid 845:tid 845] [client 102.98.113.127:58543] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tcit.org"] [uri "/.env"] [unique_id "algRr3wFE2x3g-I-qhShvAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack