🇺🇸
TPI-Abuse
2026-09-28 08:34:48
(58 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:34:41.857941 2026] [security2:error] [pid 21158:tid 21158] [client 141.101.99.103:13842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/.env.backup"] [unique_id "aromoXkELIpCfHfsV_oNSQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 13:49:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:49:28.330061 2026] [security2:error] [pid 4049:tid 4102] [client 141.101.99.103:12440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "larryfoussconstruction.com"] [uri "/.env"] [unique_id "arfNaP17Hr8OuBsbqCAqcQAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-26 12:31:40
(1 day ago)
[26/Sep/2026:15:31:40 +0300] -- 141.101.99.103 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[26/Sep/2026:15:31:40 +0300] -- 141.101.99.103 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:25:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:25:23.177414 2026] [security2:error] [pid 12516:tid 12516] [client 141.101.99.103:10893] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photokarine.com"] [uri "/.env.local"] [unique_id "arero8yR1FvybXqT7eZAugAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 10:13:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:13:49.923600 2026] [security2:error] [pid 25858:tid 25960] [client 141.101.99.103:11519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penboy7.com"] [uri "/.env.backup"] [unique_id "area3TGEsZcA679FJGVf0gAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 12:55:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 08:55:08.812720 2026] [security2:error] [pid 9047:tid 9047] [client 141.101.99.103:10388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deindo.com"] [uri "/.git/config"] [unique_id "arZvLFIr7k1aH1Hk_m3nQAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-22 18:32:16
(5 days ago)
Web App Attack
🇧🇪
madeit
2026-08-28 22:06:34
(4 weeks ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 02:23:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:23:34.033506 2026] [security2:error] [pid 2816536:tid 2816536] [client 141.101.99.103:13006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.styxwetworld.com"] [uri "/.git/refs/heads/master"] [unique_id "adcNpjgNb4txNrS8nZ2voQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 19:00:51
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 15:00:45.503729 2026] [security2:error] [pid 3272440:tid 3272440] [client 141.101.99.103:12248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziiafoundation.jazziientertainment.com"] [uri "/.git/config"] [unique_id "adal3U3cmD11E_j1lKMCcQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 16:59:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:59:04.846453 2026] [security2:error] [pid 2502939:tid 2502939] [client 141.101.99.103:9638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.amazedbyu.com"] [uri "/backend/.env"] [unique_id "adaJWCIxdszi2Q6y6YuwVgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 14:47:13
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:47:07.084788 2026] [security2:error] [pid 2379368:tid 2379368] [client 141.101.99.103:12643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infolinkqr.com"] [uri "/.env.development"] [unique_id "adZqa7rtJYFcbQ3jM77bTQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 13:09:58
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:09:52.816956 2026] [security2:error] [pid 2667503:tid 2667503] [client 141.101.99.103:9773] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.garrelsms.com"] [uri "/.env.production.bak"] [unique_id "adZToILRB9LJjFJdjtwIhQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 09:09:23
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 05:09:17.391677 2026] [security2:error] [pid 3985756:tid 3985756] [client 141.101.99.103:12254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.maverickhousellc.com"] [uri "/.env.production"] [unique_id "adYbPWj5rikrpmUsCuY_wwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 08:52:39
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:52:30.893706 2026] [security2:error] [pid 2584847:tid 2584847] [client 141.101.99.103:12669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cienmalos.com"] [uri "/app/.env"] [unique_id "adYXTsQc545uRMuAD9jPHQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
