🇺🇸
TPI-Abuse
2026-09-28 09:15:08
(17 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:14:58.843027 2026] [security2:error] [pid 10132:tid 10132] [client 141.101.99.104:12079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deindo.com"] [uri "/.env.production"] [unique_id "arowEhUzB37LRWI8xW_o-QAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 08:34:49
(58 minutes ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:34:41.769829 2026] [security2:error] [pid 26884:tid 26884] [client 141.101.99.104:9382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/.env.production"] [unique_id "aromoRNbnG9nP42kyNn3UAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 13:49:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 09:49:28.453864 2026] [security2:error] [pid 4051:tid 4165] [client 141.101.99.104:13572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "larryfoussconstruction.com"] [uri "/.env.local"] [unique_id "arfNaMIJA4Z0b1pXPxIR6gAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-26 12:31:32
(1 day ago)
[26/Sep/2026:15:31:32 +0300] -- 141.101.99.104 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more
[26/Sep/2026:15:31:32 +0300] -- 141.101.99.104 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.staging HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 11:25:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 07:25:22.928166 2026] [security2:error] [pid 12374:tid 12374] [client 141.101.99.104:14149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photokarine.com"] [uri "/.env"] [unique_id "areroiYZZ1PIrQPXeK5XMAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 10:13:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:13:49.923364 2026] [security2:error] [pid 25858:tid 25946] [client 141.101.99.104:9271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penboy7.com"] [uri "/.env"] [unique_id "area3TGEsZcA679FJGVf0QAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-22 06:34:28
(6 days ago)
Web App Attack
🇺🇸
MPL
2026-09-08 16:19:10
(2 weeks ago)
tcp/443 (5 or more attempts)
Port Scan
🇷🇺
DZBOT
2026-08-16 19:15:11
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 02:18:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:18:21.793042 2026] [security2:error] [pid 2812839:tid 2812839] [client 141.101.99.104:10846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.styxwetworld.com"] [uri "/.env.test"] [unique_id "adcMbaqOB1hK2-U7W7x8SgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-09 00:18:48
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:18:40.670536 2026] [security2:error] [pid 2836610:tid 2836610] [client 141.101.99.104:9331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drillworkscr.com.thehealthcontent.com"] [uri "/.env_config"] [unique_id "adbwYMggtLid8N0UROpeZQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 22:28:35
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 18:28:28.219035 2026] [security2:error] [pid 3037228:tid 3037228] [client 141.101.99.104:13163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pastorg.com"] [uri "/.env.container"] [unique_id "adbWjKz6HWrMizrvyeIDrQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 19:07:21
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 15:07:14.969548 2026] [security2:error] [pid 3665318:tid 3665318] [client 141.101.99.104:10402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smogsandiego.com"] [uri "/.env.backup"] [unique_id "adanYpZE0hsViMrrl7SVGQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 18:30:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 14:30:36.787248 2026] [security2:error] [pid 3024730:tid 3024730] [client 141.101.99.104:10474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.globalvillagecambodia.org"] [uri "/.env.old"] [unique_id "adaezDHxZHEnuzzS2MopkwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 16:59:12
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:59:03.180836 2026] [security2:error] [pid 2491871:tid 2491871] [client 141.101.99.104:13981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.amazedbyu.com"] [uri "/.env.test"] [unique_id "adaJV7j5JfGukpfp4s5YNwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
