๐บ๐ธ
TPI-Abuse
2026-08-29 15:37:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 11:37:22.043684 2026] [security2:error] [pid 28778:tid 28778] [client 141.101.97.125:13791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.printorganic.com"] [uri "/.git/HEAD"] [unique_id "apL8stlcypi6sjBTMSKo8gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 14:23:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 10:23:21.230471 2026] [security2:error] [pid 32168:tid 32202] [client 141.101.97.125:11971] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ahsdistance.org"] [uri "/.git/config"] [unique_id "apLrWZguVAy3ifJPDEn2ZgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 06:55:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 02:55:37.308475 2026] [security2:error] [pid 85711:tid 85830] [client 141.101.97.125:11582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.geekmd.thebiglies.com"] [uri "/.git/HEAD"] [unique_id "apKCaUQvfVR31JRUvG6AqgAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 17:43:47
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:43:41.651752 2026] [security2:error] [pid 26919:tid 26919] [client 141.101.97.125:9755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christinastoddard.com"] [uri "/.git/HEAD"] [unique_id "apHIzf5PXhktOi2W9B_cUAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 17:03:03
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:02:58.193219 2026] [security2:error] [pid 21814:tid 21825] [client 141.101.97.125:13728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batonrougegazette.com"] [uri "/.git/HEAD"] [unique_id "apG_QiKc8ft05LGlSCeiogAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 19:44:42
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:44:35.692039 2026] [security2:error] [pid 2958:tid 2958] [client 141.101.97.125:9894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kendig.thenewplace.org"] [uri "/.git/HEAD"] [unique_id "ao9CI52WJHRVNxDt8bI7LwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 16:41:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:41:42.988445 2026] [security2:error] [pid 4500:tid 4500] [client 141.101.97.125:13404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.securityzonepr.com"] [uri "/.git/config"] [unique_id "ao8XRthrPdbyrNMUUY_R3wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 15:57:04
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:56:58.577664 2026] [security2:error] [pid 11777:tid 11777] [client 141.101.97.125:9751] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.worldofeconomics.com"] [uri "/.git/config"] [unique_id "ao8MylnQ7H8vIIag-vS-bQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 23:18:51
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 19:18:43.819994 2026] [security2:error] [pid 26710:tid 26710] [client 141.101.97.125:13690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.circulodesonido.org"] [uri "/.git/HEAD"] [unique_id "ao4i08fBg0zcXGvs1fDXIwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-25 11:50:05
(5 days ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 21:49:04
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 17:48:59.779250 2026] [security2:error] [pid 30156:tid 30268] [client 141.101.97.125:14045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.edsonmedia.com"] [uri "/.git/HEAD"] [unique_id "aoy8S_X6eiDrvWEfe7Uh9QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 20:14:06
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.97.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:14:00.576304 2026] [security2:error] [pid 10914:tid 10914] [client 141.101.97.125:9812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.computerservicesofflorida.com"] [uri "/.git/config"] [unique_id "aoymCMVPWHgPuKLkwBrhLwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-16 15:28:35
(2 weeks ago)
Web App Attack
๐ฉ๐ช
acadeova
2026-08-05 12:52:17
(3 weeks ago)
๐จ Recon detected (nft drop)
SRC=141.101.97.125
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=141.101.97.125
Observed=TCP dpt=80 in=enp0s6 ttl=58
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฌ๐ง
OptimusGO
2026-08-02 18:51:45
(4 weeks ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-02 19:51:45 UTC
Log evidence:
141.101.97.125 - - [02/Aug/2026:19:51:44 +0100] "GET /_next/static/chunks/main-app-[hash]%2ejs HTTP/1.1" 404 118 "-" "curl/8.7.1"
08/02/2026-19:51:44.436431 [**] [1:1000201:1] SCANNER: Bot-like User-Agent Detected [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 141.101.97.125:10622 -> 185.127.18.66:80
show less
Port Scan
Brute-Force