🇺🇸
TPI-Abuse
2026-10-16 02:45:34
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:45:27.799040 2026] [security2:error] [pid 8271:tid 8271] [client 141.101.99.162:12783] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grupoimaginarte.com"] [uri "/wp-config.php.bak"] [unique_id "atGPxy4ak5kpxlvQFr-BUAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 01:20:52
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 21:20:47.357038 2026] [security2:error] [pid 11849:tid 11849] [client 141.101.99.162:9658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cartiologyfilms.com"] [uri "/.env.production"] [unique_id "atF771RlfWe6gTG58-gu1gAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 23:45:10
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:949110) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:45:03.508516 2026] [security2:error] [pid 11693:tid 11693] [client 141.101.99.162:11960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "justinpenney.com"] [uri "/.env.production"] [unique_id "atFlf9ARTU9dK-azEyiAeQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-15 21:59:17
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-10-15 16:17:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 12:16:54.230904 2026] [security2:error] [pid 18068:tid 18068] [client 141.101.99.162:13940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americancryonics.org"] [uri "/.svn/entries"] [unique_id "atD8dn_-SbxbNtsCj7PLfQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 10:12:20
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 06:12:14.656577 2026] [security2:error] [pid 15083:tid 15083] [client 141.101.99.162:11304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmgmt.com"] [uri "/.env.save"] [unique_id "atCm_rWcjbcFNLsfYinhoAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 07:40:18
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:40:15.537223 2026] [security2:error] [pid 12440:tid 12440] [client 141.101.99.162:9799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towlefarmcommunity.org"] [uri "/.svn/entries"] [unique_id "atCDX7t3lRD0O3KSqY3BOwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-15 07:33:23
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 21:00:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:00:29.638878 2026] [security2:error] [pid 2594:tid 2594] [client 141.101.99.162:11752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.magento.fritsknuf.com"] [uri "/.env"] [unique_id "as_tbYqk85SJJaS35oLQGwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 18:55:07
(2 days ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 14:30:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:30:29.336501 2026] [security2:error] [pid 29170:tid 29170] [client 141.101.99.162:9372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "netpet.batw.net"] [uri "/wp-config.php"] [unique_id "as-SBSg-SELfvuQ4RvWWHAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 13:55:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:55:03.744261 2026] [security2:error] [pid 28429:tid 28429] [client 141.101.99.162:10741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1surplus.com"] [uri "/.env.dev"] [unique_id "as-JtwpjIzHyqEGvaNMFYwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-10-14 12:54:01
(2 days ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 07:08:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:08:48.919267 2026] [security2:error] [pid 2840:tid 2840] [client 141.101.99.162:9973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingworksmassage.studio"] [uri "/.env.bak"] [unique_id "as8qgJTsUMWYl0EYUd6zeQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:31:16
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 141.101.99.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:31:11.853736 2026] [security2:error] [pid 27868:tid 27868] [client 141.101.99.162:10403] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||quintessence.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "quintessence.com"] [uri "/.terraform/terraform.tfstate.backup"] [unique_id "as8hr-vr8HjymKWAGx_ETQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack