๐ง๐ช
madeit
2026-08-28 22:06:45
(3 days ago)
Web App Attack
๐ง๐ช
madeit
2026-08-21 12:06:52
(1 week ago)
Web App Attack
๐ณ๐ฑ
overture.bar
2026-08-15 17:23:50
(2 weeks ago)
Blocked by UFW on NsmallFE [2052/tcp] | SPT: 11359 | TTL: 53 | LEN: 60 | TOS: 0x00
Port Scan
๐บ๐ธ
TPI-Abuse
2026-04-08 17:18:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 13:18:19.365703 2026] [security2:error] [pid 3161458:tid 3161458] [client 141.101.98.245:12665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cubacruisersguide.bahamascruisersguide.com"] [uri "/.env"] [unique_id "adaN2-53tDvXM2oSAz7w5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 16:14:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:14:41.449408 2026] [security2:error] [pid 2363560:tid 2363560] [client 141.101.98.245:10302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.vekk.org"] [uri "/www/.env"] [unique_id "adZ-8VvB8Z6aOHunCgmbiQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 14:44:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:44:09.528008 2026] [security2:error] [pid 2765746:tid 2765746] [client 141.101.98.245:13970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paragontechusa.com"] [uri "/.env.backup"] [unique_id "adZpucj-KssSz0cLtBW9IQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 13:40:47
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:40:43.671824 2026] [security2:error] [pid 160432:tid 160432] [client 141.101.98.245:10561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.planettony.com"] [uri "/.env"] [unique_id "adZa2_c1aggoDisNTJ_aigAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 12:16:35
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 08:16:27.818837 2026] [security2:error] [pid 2507255:tid 2507255] [client 141.101.98.245:12867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hker.org"] [uri "/root/.env"] [unique_id "adZHGyi7NShhC_hSBUT4OAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 07:28:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 03:28:09.185247 2026] [security2:error] [pid 2508799:tid 2508799] [client 141.101.98.245:14196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocksolidhomebuilders.com"] [uri "/.env.local"] [unique_id "adYDiUMgez65Zp10jHJlXAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-08 02:09:08
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 22:08:59.803952 2026] [security2:error] [pid 2445570:tid 2445570] [client 141.101.98.245:13183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.strawberryhillchristmas.com"] [uri "/.env.backup"] [unique_id "adW4u8k1ieI12q_y0sandgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 22:22:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 18:22:16.747668 2026] [security2:error] [pid 2295913:tid 2295913] [client 141.101.98.245:13228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ceezees.com"] [uri "/docker/.env.local"] [unique_id "adWDmHKO7sbkk01FAH8v2QAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 17:11:59
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 13:11:52.792508 2026] [security2:error] [pid 1303041:tid 1303041] [client 141.101.98.245:12175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perthdps.com"] [uri "/.env1"] [unique_id "adU62LR3rdbdSJESw1H_PAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 15:25:08
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 11:24:54.420813 2026] [security2:error] [pid 1249038:tid 1249038] [client 141.101.98.245:10810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.catking.net"] [uri "/.env.production.bak"] [unique_id "adUhxnzxv-3Um-649VrOkAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 14:10:41
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 10:10:22.761312 2026] [security2:error] [pid 1556214:tid 1556214] [client 141.101.98.245:11893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lockdownclaim.com"] [uri "/.env.json"] [unique_id "adUQTmw11iLPq4GZ-d68YwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-07 13:26:54
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 09:26:50.807608 2026] [security2:error] [pid 1088651:tid 1088651] [client 141.101.98.245:10919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.waterspell.net"] [uri "/.env.prod"] [unique_id "adUGGmP60g13dNRbOpkaOgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack