🇺🇸
TPI-Abuse
2026-10-12 22:43:42
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 18:43:36.462448 2026] [security2:error] [pid 8324:tid 8324] [client 141.101.76.157:13434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "youssefwakim.com"] [uri "/.htaccess"] [unique_id "as1imMvVUSpslv7iZtF4PAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 14:02:02
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:01:54.645661 2026] [security2:error] [pid 5912:tid 5912] [client 141.101.76.157:10813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anneoday.com"] [uri "/.env.production"] [unique_id "aszoUrD6crm_zTjRRY6dCQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-12 04:46:03
(20 hours ago)
[MonOct1206:45:58.9842292026][security2:error][pid2234420:tid2234511][client141.101.76.157:0]ModSecu ...
show more
[MonOct1206:45:58.9842292026][security2:error][pid2234420:tid2234511][client141.101.76.157:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.filarmonicaagno.ch\"][uri\"/wp-config.php.save\"][unique_id\"asxmBhXrbLOOOqsg94uizAAAAMw\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 01:57:21
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 21:57:18.603094 2026] [security2:error] [pid 2113:tid 2113] [client 141.101.76.157:11007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tallahasseepartybuses.com"] [uri "/wp-config.php.old"] [unique_id "asw-fqYwydxraoxn6RF2zQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 01:19:21
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 21:19:13.842929 2026] [security2:error] [pid 26189:tid 26193] [client 141.101.76.157:10129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buy-optimum.com"] [uri "/.svn/entries"] [unique_id "asw1kcCPFU1gC3XhrJ6PlgAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-11 00:01:46
(2 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 141.101.76.157 - - [11/Oct/2026:02:01:02 +0200] "GET /wp-config.php.save HTTP/1.1" 301 519 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-10 14:04:50
(2 days ago)
[SatOct1016:04:45.6320062026][security2:error][pid4152093:tid4152241][client141.101.76.157:0]ModSecu ...
show more
[SatOct1016:04:45.6320062026][security2:error][pid4152093:tid4152241][client141.101.76.157:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[a-z0-9]~\$\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1158\"][id\"390581\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-DataLeakage-attempttoaccessbackupfile\(disablethisruleifyourequireaccesstofilesthatendwithatilde\)\"][severity\"CRITICAL\"][hostname\"spc-ticino.ch\"][uri\"/index.php~\"][unique_id\"aspF_YYAuVfkAqExMLONWwAAAFM\"]
show less
Hacking
Web App Attack
🇪🇸
Gem
2026-10-09 22:08:01
(3 days ago)
Unauthorized web scan.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 21:01:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:01:09.738623 2026] [security2:error] [pid 23863:tid 23863] [client 141.101.76.157:14081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.loriarsenault.com"] [uri "/.env.save"] [unique_id "asgElZqdmQbOUhla2hSJ1wAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-10-08 19:05:29
(4 days ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 18:25:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:25:09.681419 2026] [security2:error] [pid 20420:tid 20420] [client 141.101.76.157:10481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prestigedomainsales.com"] [uri "/wp-config.php"] [unique_id "asfgBbNT2vNDSwLghl3z5AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 17:02:09
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:02:05.727258 2026] [security2:error] [pid 2819:tid 2819] [client 141.101.76.157:14007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bencramer.org"] [uri "/.env.production"] [unique_id "asfMjVS2cswUkAmqw1iiDgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 14:12:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 10:12:11.469218 2026] [security2:error] [pid 24906:tid 24906] [client 141.101.76.157:10126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title41.com"] [uri "/wp-config.php.bak"] [unique_id "aseku3UAC1KY0UDunBhArQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 13:28:31
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 09:28:28.576623 2026] [security2:error] [pid 14901:tid 14901] [client 141.101.76.157:13786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "montebiancoltd.com"] [uri "/.env.old"] [unique_id "aseafLcinJHPe7ith3nljQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 12:35:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 08:35:28.121003 2026] [security2:error] [pid 8901:tid 8901] [client 141.101.76.157:11406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texaslawman.net"] [uri "/.env.production"] [unique_id "aseOEOuIkNHDNwRXL-2eDwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
