🇺🇸
TPI-Abuse
2026-10-07 22:20:09
(38 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 18:19:53.689423 2026] [security2:error] [pid 2571:tid 2571] [client 141.101.76.185:11440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennyfiore.com"] [uri "/.env.bak"] [unique_id "asbFicoGWfQQFroYObYC0gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 21:03:30
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:03:15.098868 2026] [security2:error] [pid 8533:tid 8533] [client 141.101.76.185:12173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kewlkarz.com"] [uri "/.env.production"] [unique_id "asazk7stF3sHlJyECDmGGAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
p0tatosmash3r
2026-10-07 18:19:38
(4 hours ago)
Honeypot-observed malicious activity: unauth data-store / config enumeration; data-store enumeration ...
show more
Honeypot-observed malicious activity: unauth data-store / config enumeration; data-store enumeration.
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 14:13:59
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 10:13:56.367785 2026] [security2:error] [pid 28295:tid 28295] [client 141.101.76.185:9644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.lindenwoodpark.org"] [uri "/.env.backup"] [unique_id "asZTpPJYfWnGCN9O-ML_igAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-07 13:34:16
(9 hours ago)
2026/10/07 11:46:00 [error] 3693534#3693534: *114417 [client 141.101.76.185] ModSecurity: Access den ...
show more
2026/10/07 11:46:00 [error] 3693534#3693534: *114417 [client 141.101.76.185] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yobookz.com"] [uri "/wp-config.php.bak"] [unique_id "179137356095.319069"] [ref ""], client: 141.101.76.185, server: yobookz.com, request: "GET /wp-config.php.bak HTTP/2.0", host: "yobookz.com"
2026/10/07 11:46:02 [error] 3693535#3693535: *114418 [client 141.101.76.185] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/loca
...
show less
Brute-Force
🇺🇦
URAN Publishing Service
2026-10-07 13:02:47
(9 hours ago)
[07/Oct/2026:16:02:47 +0300] -- 141.101.76.185 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[07/Oct/2026:16:02:47 +0300] -- 141.101.76.185 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-config.php.old HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-07 08:03:32
(14 hours ago)
Multiple WAF Violations
Web App Attack
2026-10-07 05:15:18
(17 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-07 01:32:30
(21 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:40:14
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:40:07.104781 2026] [security2:error] [pid 4653:tid 4653] [client 141.101.76.185:12941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stukabird.com"] [uri "/.env.old"] [unique_id "asWU56HpiQ40aztBaXmjngAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 00:04:07
(22 hours ago)
(mod_security) mod_security (id:210730) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 20:03:56.924910 2026] [security2:error] [pid 479:tid 479] [client 141.101.76.185:9470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||palmatrader.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "palmatrader.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "asWMbH8BT7Ngk_lK_VdqDQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 23:19:06
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 19:18:58.896133 2026] [security2:error] [pid 31257:tid 31257] [client 141.101.76.185:13183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guardmagic.com"] [uri "/.svn/entries"] [unique_id "asWB4sp3RA0pb0AKLLoF6wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 20:57:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 16:57:24.865585 2026] [security2:error] [pid 29325:tid 29325] [client 141.101.76.185:13993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humbliaslaw.com"] [uri "/.env"] [unique_id "asVgtDINrMAUoRD088poaQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 16:06:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 12:06:03.670472 2026] [security2:error] [pid 1953:tid 1953] [client 141.101.76.185:11195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chezlubacov.org"] [uri "/.git/HEAD"] [unique_id "asUca0oU96kM36fxzE2LGAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:32:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.76.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:32:27.235429 2026] [security2:error] [pid 12445:tid 12445] [client 141.101.76.185:11934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smart1services.com"] [uri "/.env.local"] [unique_id "asUUi9nvWfnDoa7QD9zf7gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
