๐บ๐ธ
TPI-Abuse
2026-10-12 15:19:24
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:19:17.612205 2026] [security2:error] [pid 24347:tid 24446] [client 141.101.98.107:11669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debeneesse.com"] [uri "/.env.save"] [unique_id "asz6dctaeP4ybXSyKhqjqAAAAg4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 12:58:18
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:58:10.639390 2026] [security2:error] [pid 28896:tid 28896] [client 141.101.98.107:12229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memphislimousines.com"] [uri "/.env.backup"] [unique_id "aszZYq472uAAD0AK609aBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 00:00:00
(20 hours ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
๐ฌ๐ง
consul.to
2026-10-11 17:47:27
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
Lee Daniel
2026-10-11 15:11:26
(1 day ago)
141.101.98.107 - - [11/Oct/2026:11:11:25 -0400] "GET /config.php HTTP/1.1" 404 51384 "-" "Mozilla/5. ...
show more
141.101.98.107 - - [11/Oct/2026:11:11:25 -0400] "GET /config.php HTTP/1.1" 404 51384 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 07:55:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:55:02.392859 2026] [security2:error] [pid 17660:tid 17660] [client 141.101.98.107:11937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lajoyadelmar.net"] [uri "/.env.save"] [unique_id "astA1hBUmHjW8x7JyqUoOgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-11 03:50:44
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-11 02:09:29
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-10 17:50:09
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-10 17:25:04
(2 days ago)
141.101.98.107 - - [10/Oct/2026:19:25:01 +0200] "GET /wp-config.php.bak HTTP/2.0" 404 0 "-" "Mozilla ...
show more
141.101.98.107 - - [10/Oct/2026:19:25:01 +0200] "GET /wp-config.php.bak HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
141.101.98.107 - - [10/Oct/2026:19:25:01 +0200] "GET /.terraform/terraform.tfstate HTTP/2.0" 404 363 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
141.101.98.107 - - [10/Oct/2026:19:25:01 +0200] "GET /config.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
show less
Web App Attack
Brute-Force
๐บ๐ธ
kosada.com
2026-10-10 15:16:16
(2 days ago)
Repeated requests for suspicious nonexistent URLs, for example: /phpinfo.php (HTTP/2.0 port 443, use ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /phpinfo.php (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0")
show less
Web App Attack
๐ฉ๐ช
Viveronese
2026-10-10 11:54:30
(2 days ago)
HTTP vulnerability scanning
Web App Attack
๐ซ๐ท
masterguru
2026-10-10 11:38:30
(2 days ago)
Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-131)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 11:32:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 07:32:00.053406 2026] [security2:error] [pid 9438:tid 9438] [client 141.101.98.107:12061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lozzy.net"] [uri "/.env.backup"] [unique_id "asoiMJya1BcUXdmFZjpPZwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 11:01:41
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 141.101.98.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 07:01:34.717357 2026] [security2:error] [pid 25594:tid 25594] [client 141.101.98.107:12117] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "malolobookings.com"] [uri "/.env.backup"] [unique_id "asobDkaomfqceUt_TBZH8AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack