🇺🇸
TPI-Abuse
2026-10-06 22:08:50
(46 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:08:26.168705 2026] [security2:error] [pid 2313:tid 2313] [client 141.101.98.176:12041] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancycleaners.com"] [uri "/.env.old"] [unique_id "asVxWjBPV9drE37INgEbIAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 21:49:30
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 17:49:22.823009 2026] [security2:error] [pid 9102:tid 9102] [client 141.101.98.176:11335] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humbliaslaw.com"] [uri "/.env.local"] [unique_id "asVs4lvxrWjXtIK_F3FHbgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 16:34:18
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 12:34:07.181943 2026] [security2:error] [pid 24482:tid 24482] [client 141.101.98.176:9777] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toytractorrepair.com"] [uri "/.env.backup"] [unique_id "asUi_xlfGbATIUivO1s8HAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-10-06 14:41:31
(8 hours ago)
Automatic report for brute force attack
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-10-06 12:35:50
(10 hours ago)
[06/Oct/2026:15:35:49 +0300] -- 141.101.98.176 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[06/Oct/2026:15:35:49 +0300] -- 141.101.98.176 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /index.php.bak HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 11:57:31
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 07:57:20.834563 2026] [security2:error] [pid 4970:tid 4970] [client 141.101.98.176:11810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peregrineproject.com"] [uri "/.git/HEAD"] [unique_id "asTiIMubMilESuXfte_rQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:29:12
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:29:02.732887 2026] [security2:error] [pid 1950799:tid 1950836] [client 141.101.98.176:13393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condobudget.com"] [uri "/.env.production"] [unique_id "asTNbnlkd0pOI7-89lMY_QAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
bohl-aiG5aef
2026-10-06 10:03:24
(12 hours ago)
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
🇺🇸
TPI-Abuse
2026-10-06 09:30:12
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 05:29:58.934589 2026] [security2:error] [pid 7435:tid 7435] [client 141.101.98.176:12239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drayvian.com"] [uri "/wp-config.php"] [unique_id "asS_lolLPLXCrXXuHiobUAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-06 06:33:44
(16 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 06:03:07
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:02:54.422223 2026] [security2:error] [pid 24598:tid 24598] [client 141.101.98.176:13870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mavrik12.com"] [uri "/wp-config.php"] [unique_id "asSPDkqjtfap_dHmTscApwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 02:12:02
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 22:11:54.200945 2026] [security2:error] [pid 24511:tid 24511] [client 141.101.98.176:12194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handankoc.net"] [uri "/.env.bak"] [unique_id "asRY6mcFGj_oWAItaP05KwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-05 22:14:15
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 20:35:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 16:35:26.571636 2026] [security2:error] [pid 23032:tid 23032] [client 141.101.98.176:13147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daassociatesllc.com"] [uri "/.env"] [unique_id "asQKDpRXOe9x38a7rV6ulgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 07:45:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 03:45:28.172794 2026] [security2:error] [pid 23863:tid 23863] [client 141.101.98.176:10083] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theinjuredparties.com"] [uri "/.env.production"] [unique_id "asNVmPKwWiPLmDu7TwZsbwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
