🇧🇪
madeit
2026-09-03 18:12:13
(23 hours ago)
Web App Attack
2026-08-20 01:56:34
(2 weeks ago)
Blocked by firewall on hugin [2053/tcp] | Rule: UFW | SPT: 9779 | TTL: 56 | LEN: 60 | TOS: 0x00 • Re ...
show more
Blocked by firewall on hugin [2053/tcp] | Rule: UFW | SPT: 9779 | TTL: 56 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
Séfora Srl
2026-07-19 12:04:04
(1 month ago)
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache ...
show more
Bad user agents ignoring web crawling rules. Draing bandwidth - detected by Fail2Ban in plesk-apache-badbot jail
show less
Bad Web Bot
🇬🇧
OptimusGO
2026-07-07 02:31:00
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-07-07 03:31:00 UTC
Log evidence:
07/07/2026-03:30:58.858473 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 141.101.98.74:13869 -> 185.127.18.66:2083
07/07/2026-03:30:59.882434 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 141.101.98.74:13869 -> 185.127.18.66:2083
show less
Port Scan
Brute-Force
🇺🇸
TPI-Abuse
2026-04-09 03:19:50
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 23:19:43.978209 2026] [security2:error] [pid 3382895:tid 3382895] [client 141.101.98.74:11440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.burnbuns.com"] [uri "/.env.production"] [unique_id "adcaz_sYGhQD-_bjafACrgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 02:50:43
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:50:35.066763 2026] [security2:error] [pid 2519442:tid 2519442] [client 141.101.98.74:12193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hvac.cloudex.link"] [uri "/.env.json"] [unique_id "adcT-1vlglmEWBaN_4TuGAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 01:20:54
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 21:20:47.185838 2026] [security2:error] [pid 2754440:tid 2754440] [client 141.101.98.74:12583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usebliss.ai"] [uri "/.env.development"] [unique_id "adb-7zhSpJgRap8I0wG0fAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 12:54:56
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 08:54:39.779155 2026] [security2:error] [pid 2513572:tid 2513592] [client 141.101.98.74:10910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ceol.com"] [uri "/.env.example"] [unique_id "adZQD1fcPpxF5whvDm4odgAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 09:07:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 05:06:54.092834 2026] [security2:error] [pid 2114091:tid 2114091] [client 141.101.98.74:12196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.skulldump.com"] [uri "/config/.env"] [unique_id "adYarsY-UA99fjR06oB2agAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 08:17:17
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:17:09.692174 2026] [security2:error] [pid 2513023:tid 2513023] [client 141.101.98.74:11047] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diamenty.info"] [uri "/.env.dist"] [unique_id "adYPBWvs6w876lYIZGjALQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 07:22:39
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 03:22:31.520127 2026] [security2:error] [pid 2194935:tid 2194935] [client 141.101.98.74:12035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.miroconsulting.es"] [uri "/.env.development.local"] [unique_id "adYCN-YogvUR0RVT9gkpEAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 06:21:46
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 02:21:42.718263 2026] [security2:error] [pid 2961996:tid 2961996] [client 141.101.98.74:14130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mcgmcg.com"] [uri "/.env.backup"] [unique_id "adXz9mON-2s0EamGK5zkYwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 06:04:55
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 02:04:41.100362 2026] [security2:error] [pid 2527472:tid 2527472] [client 141.101.98.74:10118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jchiggins.com"] [uri "/.env"] [unique_id "adXv-eXgzXhlux04Pg_i_AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 05:31:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 01:31:13.541711 2026] [security2:error] [pid 41980:tid 42020] [client 141.101.98.74:10093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.joshuapaulweckesser.com"] [uri "/.env.backup"] [unique_id "adXoIUPmDEjKE1xeIHJg2gAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 04:19:58
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 00:19:51.893427 2026] [security2:error] [pid 1768589:tid 1768615] [client 141.101.98.74:10055] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.oceanstatecollision.com"] [uri "/.env_backup"] [unique_id "adXXZ8sTQfkBEag-bx8u1QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
