🇦🇺
trentwiles.com
2026-04-27 05:51:18
(2 months ago)
Unauthorized connection attempt detected from IP address 141.101.105.13 to port 443 [SYD]
Port Scan
🇺🇸
MPL
2026-04-01 10:02:20
(3 months ago)
tcp/80 (5 or more attempts)
Port Scan
🇷🇴
ReporTR
2026-02-05 16:21:20
(5 months ago)
Repeated malicious activity detected by Fail2Ban jail 'plesk-apache'. TCP connection completed. IP b ...
show more
Repeated malicious activity detected by Fail2Ban jail 'plesk-apache'. TCP connection completed. IP banned.
show less
Hacking
Web App Attack
🇺🇸
mawan
2025-08-25 18:16:11
(10 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
2025-08-22 10:39:48
(10 months ago)
wp admin page access attempt
...
Hacking
Web App Attack
2025-07-21 02:36:48
(11 months ago)
wp admin page access attempt
...
Hacking
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-05-20 04:56:57
(1 year ago)
Port probe to tcp/443 (https)
[srv125]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-04-13 13:42:40
(1 year ago)
2 port probes: 2x tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-03-16 22:34:43
(1 year ago)
Port probe to tcp/443 (https)
[srv125]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-10 08:37:53
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 10 04:37:42.549944 2025] [security2:error] [pid 1757:tid 1757] [client 141.101.105.13:20472] [client 141.101.105.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.swarnar.com"] [uri "/.env.save"] [unique_id "Z86k1han7ZR3LQEqx8TeNQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Study Bitcoin 🤗
2025-03-07 22:58:48
(1 year ago)
Port probe to tcp/443 (https)
[srv125]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-04 04:44:49
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 23:44:41.043691 2025] [security2:error] [pid 18507:tid 18507] [client 141.101.105.13:16958] [client 141.101.105.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.easy-byte.net"] [uri "/application/.env"] [unique_id "Z8aFOaqm4nWHJ6X4yYAJaAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-26 12:08:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.105.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 26 07:08:22.295302 2025] [security2:error] [pid 6023:tid 6023] [client 141.101.105.13:21262] [client 141.101.105.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gibitdigital.com"] [uri "/dev/.env"] [unique_id "Z78ENj_0xZ-CxN0ayr_WSgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
no1knows.com
2025-02-03 22:29:02
(1 year ago)
2025/02/03 22:28:39 [error] 497624#497624: *99111 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2025/02/03 22:28:39 [error] 497624#497624: *99111 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/02/03 22:28:55 [error] 497624#497624: *99111 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /classwithtostring.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/02/03 22:28:55 [error] 497624#497624: *99111 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /cong.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
...
show less
Brute-Force
Bad Web Bot
🇬🇧
no1knows.com
2025-01-22 14:56:38
(1 year ago)
2025/01/22 14:56:17 [error] 3430644#3430644: *53347 FastCGI sent in stderr: "Primary script unknown" ...
show more
2025/01/22 14:56:17 [error] 3430644#3430644: *53347 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /wp-admin/maint/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/01/22 14:56:17 [error] 3430644#3430644: *53347 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /.well-known/acme-challenge/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/01/22 14:56:33 [error] 3430644#3430644: *53347 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 141.101.105.13, server: _, request: "GET /wp-content/themes/sketch/404.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
...
show less
Brute-Force
Bad Web Bot