🇺🇸
TPI-Abuse
2026-09-30 16:18:09
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 12:18:02.744047 2026] [security2:error] [pid 2386:tid 2521] [client 141.101.98.62:11462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/.svn/entries"] [unique_id "ar02Onz5zw5Z8UrhJKQbqQAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:22:06
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:21:58.884148 2026] [security2:error] [pid 15697:tid 15697] [client 141.101.98.62:12331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mccompu.com"] [uri "/.env.staging"] [unique_id "ar0pFhecBz3UY14l0uuHdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-30 12:49:39
(4 hours ago)
[30/Sep/2026:15:49:39 +0300] -- 141.101.98.62 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[30/Sep/2026:15:49:39 +0300] -- 141.101.98.62 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.staging HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 07:00:09
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 03:00:03.027707 2026] [security2:error] [pid 14046:tid 14046] [client 141.101.98.62:11700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "muranelli.com"] [uri "/wp-config.php.bak"] [unique_id "aryzcyPlM3cEjpcBzgpgTwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:38:30
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:38:23.791777 2026] [security2:error] [pid 10961:tid 10961] [client 141.101.98.62:9667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casadelsolmexico.net"] [uri "/.env.staging"] [unique_id "arx2H0XfHZwH49x5rebvRQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 22:07:06
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:07:00.813939 2026] [security2:error] [pid 27632:tid 27632] [client 141.101.98.62:9393] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gormish.org"] [uri "/wp-config.php.bak"] [unique_id "arw2hL2fKROsqEaP413YMgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-29 22:01:33
(19 hours ago)
GET /.env.local HTTP/1.1
...
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-29 08:22:34
(1 day ago)
[29/Sep/2026:11:22:34 +0300] -- 141.101.98.62 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env ...
show more
[29/Sep/2026:11:22:34 +0300] -- 141.101.98.62 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.local HTTP/1.1
show less
Bad Web Bot
Web App Attack
2026-09-29 05:46:56
(1 day ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 22:48:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 18:48:03.460278 2026] [security2:error] [pid 24468:tid 24468] [client 141.101.98.62:13689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mmmetalizing.com"] [uri "/wp-config.php.bak"] [unique_id "arruoxrbijPvkxUqYnPySQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:52:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:52:25.027186 2026] [security2:error] [pid 24700:tid 24700] [client 141.101.98.62:13345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakeviewbewdley.com"] [uri "/.env.production"] [unique_id "arq3aVjMvBBK-Q67qMwg8wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:19:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:19:00.878252 2026] [security2:error] [pid 7860:tid 7860] [client 141.101.98.62:10015] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitalitywebb.com"] [uri "/.env.local"] [unique_id "arqvlAqGyJ4ROBMTqvwP9wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 16:15:13
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:15:07.305534 2026] [security2:error] [pid 4046:tid 4046] [client 141.101.98.62:13131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeromesupick.com"] [uri "/.env.staging"] [unique_id "arqSi3zpqERfIgcM1_pSnwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-09-28 12:55:35
(2 days ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 10:40:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:40:27.940086 2026] [security2:error] [pid 953:tid 953] [client 141.101.98.62:14313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wedeliverstrippers.com"] [uri "/.svn/entries"] [unique_id "arpEG6My3ktZUEqh_J73UgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack