🇺🇸
TPI-Abuse
2026-10-08 02:04:40
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 22:04:35.078753 2026] [security2:error] [pid 23651:tid 23673] [client 141.101.76.101:13911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nothingwithoutwater.com"] [uri "/.git/config"] [unique_id "asb6MyK6fxp77zH4kaPBVQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 00:17:27
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 20:17:25.929651 2026] [security2:error] [pid 22664:tid 22664] [client 141.101.76.101:13810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "resilientigm.com"] [uri "/.env.staging"] [unique_id "asbhFWYZrsKhfiMFzpjXOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 22:24:34
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:24:29.127686 2026] [security2:error] [pid 22470:tid 22470] [client 141.101.76.101:9779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fixitsmart.com"] [uri "/.env.bak"] [unique_id "asbGnUNprkhfgflKiDx_MgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 21:03:32
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:03:15.082244 2026] [security2:error] [pid 8530:tid 8530] [client 141.101.76.101:14295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kewlkarz.com"] [uri "/.env.backup"] [unique_id "asazk8TLUpu3m0JykffrqQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 19:28:11
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 15:28:04.300278 2026] [security2:error] [pid 28969:tid 28969] [client 141.101.76.101:11269] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-cook-islands.com"] [uri "/.git/config"] [unique_id "asadRKPBAm7qxizcK9bQnAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:57:22
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:57:18.471225 2026] [security2:error] [pid 20750:tid 20750] [client 141.101.76.101:11367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disneylawsuit.com"] [uri "/.git/config"] [unique_id "asaWDiKifd3X4o_za-I1QQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:21:41
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:21:35.233861 2026] [security2:error] [pid 5110:tid 5110] [client 141.101.76.101:14308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftiptondds.com"] [uri "/.env.staging"] [unique_id "asaNr_8g-6Pz3Cires5gagAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-07 18:03:18
(8 hours ago)
2026/10/07 13:34:12 [error] 3693532#3693532: *116320 [client 141.101.76.101] ModSecurity: Access den ...
show more
2026/10/07 13:34:12 [error] 3693532#3693532: *116320 [client 141.101.76.101] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yobookz.com"] [uri "/.netrc"] [unique_id "179138005240.082214"] [ref ""], client: 141.101.76.101, server: yobookz.com, request: "GET /.netrc HTTP/2.0", host: "yobookz.com"
2026/10/07 13:34:13 [error] 3693532#3693532: *116320 [client 141.101.76.101] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-cr
...
show less
Brute-Force
🇺🇦
URAN Publishing Service
2026-10-07 14:28:05
(11 hours ago)
[07/Oct/2026:17:28:04 +0300] -- 141.101.76.101 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[07/Oct/2026:17:28:04 +0300] -- 141.101.76.101 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-config.php.save HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 04:58:18
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 00:58:11.962734 2026] [security2:error] [pid 3292357:tid 3292374] [client 141.101.76.101:12563] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aussiepens.com"] [uri "/.env.backup"] [unique_id "asXRY9NMsGpZFjO_eWcIdgAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-07 02:00:44
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 01:50:17
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 21:50:10.931732 2026] [security2:error] [pid 13342:tid 13342] [client 141.101.76.101:12512] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "cpectec.com"] [uri "/wp-config.php.old"] [unique_id "asWlUgzrWkgXap-0xzUnYgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 23:19:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 19:19:02.845933 2026] [security2:error] [pid 29510:tid 29510] [client 141.101.76.101:10713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guardmagic.com"] [uri "/.env.old"] [unique_id "asWB5v99GM_6ZceC3I_U7gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:47:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:47:08.493422 2026] [security2:error] [pid 22578:tid 22578] [client 141.101.76.101:9317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steveleeds.com"] [uri "/wp-config.php"] [unique_id "asUX_FKNyqQwCcvkg8WmWAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 13:25:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:25:28.091061 2026] [security2:error] [pid 2371:tid 2371] [client 141.101.76.101:11654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kim-porter.com"] [uri "/wp-config.php.save"] [unique_id "asT2yCYQYGpDiB8bZOhMcwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
