๐ฉ๐ช
Vegascosmetics
2026-06-04 07:34:45
(11 hours ago)
Kingcopy(AI-IDS) Report: IP automatically blocked after suspicious activity. Vegas Security System
Hacking
Web App Attack
๐บ๐ธ
WellSpring
2026-05-20 12:52:46
(2 weeks ago)
wordpress scan on 202.today/wp-admin/install.php โ WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
Web App Attack
๐จ๐ฆ
dispensight
2026-05-18 07:00:00
(2 weeks ago)
Automated WordPress exploit probe via honeydomain. UA: dispensight.sbs. Cloudflare Germany proxy.
Bad Web Bot
Anonymous
2026-05-11 15:20:42
(3 weeks ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2026-05-04 06:06:31
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-04-22 02:06:14
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-04-20 10:02:26
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-09 01:20:56
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 21:20:47.185144 2026] [security2:error] [pid 2754630:tid 2754630] [client 141.101.98.24:13831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usebliss.ai"] [uri "/.env.dev"] [unique_id "adb-7_puLvY4m4ESPuakXAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 21:16:45
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 17:16:32.946425 2026] [security2:error] [pid 2727474:tid 2727474] [client 141.101.98.24:9500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lakesideshelving.com"] [uri "/.env.old"] [unique_id "adbFsLlnMYfNxlnb0AkiLgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 17:39:20
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 13:39:10.637989 2026] [security2:error] [pid 3186604:tid 3186604] [client 141.101.98.24:9715] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.franknash.com"] [uri "/.env.old"] [unique_id "adaSvnwmidwxD6URvi0y1AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 15:53:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 11:52:56.887960 2026] [security2:error] [pid 2981335:tid 2981335] [client 141.101.98.24:10487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alanbeckwith.com"] [uri "/.env_settings"] [unique_id "adZ52Fckr2-4IzaOp2mgVQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 14:07:30
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:07:17.058450 2026] [security2:error] [pid 3410544:tid 3410544] [client 141.101.98.24:9407] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.billymitchell.com"] [uri "/.git/index"] [unique_id "adZhFW26NCsvFBN71MN4TAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 13:19:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:19:32.971063 2026] [security2:error] [pid 2144023:tid 2144023] [client 141.101.98.24:14164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.zztp.ws"] [uri "/core/.env"] [unique_id "adZV5JFM90e7x7llUfG4ewAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 12:08:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 08:08:31.857973 2026] [security2:error] [pid 2966934:tid 2966934] [client 141.101.98.24:11475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.aaamessage.com"] [uri "/.env.dev"] [unique_id "adZFP_P83XH6oxgJvB3w2QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 09:10:26
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 05:10:15.093724 2026] [security2:error] [pid 2475810:tid 2475810] [client 141.101.98.24:12338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ttlatl.com"] [uri "/.env.example"] [unique_id "adYbd46k1Z30-2bsMpVekwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack