🇫🇷
dynamix
2026-10-07 09:48:14
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 09:25:23
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 05:25:12.719816 2026] [security2:error] [pid 18020:tid 18020] [client 141.101.98.235:9860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtempleofdeliverance.org"] [uri "/.svn/entries"] [unique_id "asYP-Pbh_-zHjl_DhL-G-gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 05:50:53
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 01:50:25.713136 2026] [security2:error] [pid 9374:tid 9374] [client 141.101.98.235:10081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "logicpuzzles.com"] [uri "/.env.save"] [unique_id "asXdoXG21wHN0ofXTKpHtAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-07 03:12:43
(7 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /.env.bak (HTTP/1.1 port 80, bogus v ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /.env.bak (HTTP/1.1 port 80, bogus vhost, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 22:08:54
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:08:21.845126 2026] [security2:error] [pid 15241:tid 15241] [client 141.101.98.235:11595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fancycleaners.com"] [uri "/wp-config.php.old"] [unique_id "asVxVUl-2xiwXsKI1ggAIwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 21:49:29
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 17:49:22.822410 2026] [security2:error] [pid 13528:tid 13528] [client 141.101.98.235:12396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humbliaslaw.com"] [uri "/.env.staging"] [unique_id "asVs4u4tNnnrHAgzPsHkjQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 21:26:25
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 17:26:16.309547 2026] [security2:error] [pid 30726:tid 30762] [client 141.101.98.235:9643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasertagmetairie.com"] [uri "/.env.save"] [unique_id "asVneLRgRy31jHh4KaWajAAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 16:34:25
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 12:34:10.360453 2026] [security2:error] [pid 17270:tid 17270] [client 141.101.98.235:10252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toytractorrepair.com"] [uri "/wp-config.php.bak"] [unique_id "asUjAqyool1Qu1ksbk63iwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 15:35:31
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 11:35:22.892168 2026] [security2:error] [pid 6767:tid 6767] [client 141.101.98.235:13645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disio.com"] [uri "/.git/HEAD"] [unique_id "asUVOn6Zc1Sv7wi6B_amvAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-10-06 14:36:39
(20 hours ago)
Automatic report for brute force attack
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-10-06 12:35:43
(22 hours ago)
[06/Oct/2026:15:35:43 +0300] -- 141.101.98.235 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[06/Oct/2026:15:35:43 +0300] -- 141.101.98.235 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-config.php.save HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 10:44:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 06:43:55.109899 2026] [security2:error] [pid 24686:tid 24686] [client 141.101.98.235:11522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danialias.com"] [uri "/.htaccess"] [unique_id "asTQ63TncHHJkiAOXlpwgQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-06 06:33:45
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 06:03:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:02:52.444593 2026] [security2:error] [pid 25658:tid 25658] [client 141.101.98.235:13022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mavrik12.com"] [uri "/.svn/entries"] [unique_id "asSPDOaX2MWjYNizvl2RzwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
abdubhai
2026-10-06 04:49:18
(1 day ago)
141.101.98.235 - - [06/Oct/2026:
...
Brute-Force
