Anonymous
2026-08-27 22:15:09
(15 hours ago)
[Fri Aug 28 00:15:08.198985 2026] [authz_core:error] [pid 2737] [client 141.101.98.147:10153] AH0163 ...
show more
[Fri Aug 28 00:15:08.198985 2026] [authz_core:error] [pid 2737] [client 141.101.98.147:10153] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Aug 28 00:15:08.391795 2026] [authz_core:error] [pid 2737] [client 141.101.98.147:10153] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Aug 28 00:15:08.656171 2026] [authz_core:error] [pid 2737] [client 141.101.98.147:10153] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-30 09:18:08
(4 weeks ago)
[Thu Jul 30 11:17:54.509994 2026] [authz_core:error] [pid 15789] [client 141.101.98.147:9344] AH0163 ...
show more
[Thu Jul 30 11:17:54.509994 2026] [authz_core:error] [pid 15789] [client 141.101.98.147:9344] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 30 11:18:07.714980 2026] [authz_core:error] [pid 30254] [client 141.101.98.147:13643] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Jul 30 11:18:07.909911 2026] [authz_core:error] [pid 30254] [client 141.101.98.147:13643] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-07-17 15:33:38
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ท๐บ
DZBOT
2026-07-13 07:22:37
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฌ๐ง
pinguin
2026-04-15 03:53:53
(4 months ago)
Triggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from GB.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /config.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-04-09 04:20:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 09 00:20:21.074952 2026] [security2:error] [pid 54358:tid 54358] [client 141.101.98.147:11645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.teamsewusa.com"] [uri "/.env.production"] [unique_id "adcpBYlU_zCvVMxWszulHQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-09 00:31:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:31:45.389887 2026] [security2:error] [pid 2677664:tid 2677664] [client 141.101.98.147:10378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.usoilinc.com"] [uri "/.env.old"] [unique_id "adbzcSUbNdGYgTTQ2v10vQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 19:58:51
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 15:58:43.897074 2026] [security2:error] [pid 3257195:tid 3257195] [client 141.101.98.147:13529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.leewis.com"] [uri "/.env.prod"] [unique_id "adazczot2fgly7xoGuiDPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 19:40:25
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 15:40:11.988300 2026] [security2:error] [pid 29124:tid 29124] [client 141.101.98.147:13051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.srtalent.indie100.com"] [uri "/config/.env"] [unique_id "adavG7HKKn3BodcsErTASQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 18:53:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 14:53:21.026872 2026] [security2:error] [pid 2924088:tid 2924088] [client 141.101.98.147:10768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gilbertortegajewelry.com"] [uri "/.env~"] [unique_id "adakIQVtF6W3ovpDDjrN-gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 17:48:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 13:48:44.700562 2026] [security2:error] [pid 1433146:tid 1433146] [client 141.101.98.147:13414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woahmanatee.com"] [uri "/.env.dev"] [unique_id "adaU_Kf6n2-jcj75ALKu3gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 15:43:06
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 11:42:56.187276 2026] [security2:error] [pid 1951289:tid 1951426] [client 141.101.98.147:12190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kellenlee.com"] [uri "/.env.orig"] [unique_id "adZ3gGCk3Rh3hbHiBwmHuAAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 14:28:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:28:49.278503 2026] [security2:error] [pid 227393:tid 227393] [client 141.101.98.147:10999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.johnbentley.info"] [uri "/.env1"] [unique_id "adZmIfqy0D00GJr-_j8dYQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 11:11:48
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 07:11:29.040348 2026] [security2:error] [pid 1330559:tid 1330559] [client 141.101.98.147:13976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.iberhome.net"] [uri "/.env.bak"] [unique_id "adY34avzsJL4M9YYtmRK-gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 08:20:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:20:23.666845 2026] [security2:error] [pid 2513018:tid 2513018] [client 141.101.98.147:11488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diamenty.info"] [uri "/.env.development"] [unique_id "adYPx0gH49lV3_uFt6s-7gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack