🇩🇪
grassau.com
2026-08-25 10:18:25
(1 week ago)
(wordpress) Failed wordpress login from 102.98.109.127 (MA/Morocco/Casablanca-Settat/Casablanca/-)
Brute-Force
2026-08-24 14:28:50
(1 week ago)
FPROCO WEBEXPLOIT 102.98.109.127 (102.98.109.127)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 10:18:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:18:43.450816 2026] [security2:error] [pid 28079:tid 28079] [client 102.98.109.127:50517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "67ronin.com"] [uri "/.env"] [unique_id "aol3gxehZnI_bej8TBckpwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-22 05:00:27
(1 week ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇺🇸
TPI-Abuse
2026-08-21 23:05:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 19:05:25.441441 2026] [security2:error] [pid 3803:tid 3803] [client 102.98.109.127:57010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4windsmedia.com"] [uri "/.env"] [unique_id "aojZtQszFNSN2zSr8aAisQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 20:34:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 16:34:22.198272 2026] [security2:error] [pid 23744:tid 23744] [client 102.98.109.127:63233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4photogifts.com"] [uri "/.env"] [unique_id "aoi2Tt2hJbzyGfYObfJ81QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 18:18:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 14:18:12.801050 2026] [security2:error] [pid 30948:tid 30948] [client 102.98.109.127:54629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4starpromotions.com"] [uri "/.env"] [unique_id "aoiWZI_VWrdgMqIW9w5x5AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 16:41:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 12:41:23.826741 2026] [security2:error] [pid 5596:tid 5596] [client 102.98.109.127:59024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4dbm.com"] [uri "/.env"] [unique_id "aoh_s8xkJ9MBkkl2BXEYvwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 16:15:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 12:15:42.098574 2026] [security2:error] [pid 9740:tid 9740] [client 102.98.109.127:49588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "415test.com"] [uri "/.env"] [unique_id "aoh5rgJBQcWZ4r2zkjbqBgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 15:46:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 11:46:51.880965 2026] [security2:error] [pid 27944:tid 27944] [client 102.98.109.127:54873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "495metro.com"] [uri "/.env"] [unique_id "aohy694agi9gBidmSCn_YAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 15:31:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 11:31:08.924487 2026] [security2:error] [pid 9984:tid 9984] [client 102.98.109.127:55094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "40svocaltrio.com"] [uri "/.env"] [unique_id "aohvPOMLWIdi6ngtTxh6ZgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
lufi
2026-08-21 15:02:10
(1 week ago)
2026-08-21T17:02:10+02:00 lufischer04 ids442 2026-08-21 17:02:10 102.98.109.127: blacklistedPath: /. ...
show more
2026-08-21T17:02:10+02:00 lufischer04 ids442 2026-08-21 17:02:10 102.98.109.127: blacklistedPath: /.env
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack
🇨🇭
4server
2026-08-21 13:09:12
(1 week ago)
[FriAug2115:09:09.5126352026][security2:error][pid1920761:tid1920863][client102.98.109.127:0]ModSecu ...
show more
[FriAug2115:09:09.5126352026][security2:error][pid1920761:tid1920863][client102.98.109.127:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"465\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"4-server.com\"][uri\"/.env\"][unique_id\"aohN9VW96phRqMMK2horGgAAAAw\"]
show less
Hacking
Web App Attack
🇩🇪
XICTRON
2026-08-21 12:15:06
(1 week ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 01:59:02
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.109.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 21:58:56.376362 2026] [security2:error] [pid 29137:tid 29143] [client 102.98.109.127:49253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "draas.info"] [uri "/.env"] [unique_id "aoew4IDOJTVHOe1cUKM5dQAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
