π³π±
wolfemium
2026-06-10 00:40:53
(1 week ago)
141.101.98.35 - - [10/Jun/2026:03:39:11 +0300] "GET /edit.php HTTP/1.1" 499 0 "-" "-"
141.101.98.35 ...
show more
141.101.98.35 - - [10/Jun/2026:03:39:11 +0300] "GET /edit.php HTTP/1.1" 499 0 "-" "-"
141.101.98.35 - - [10/Jun/2026:03:40:13 +0300] "GET /lib.php HTTP/1.1" 502 150 "-" "-"
141.101.98.35 - - [10/Jun/2026:03:40:52 +0300] "GET /wp-png.php HTTP/1.1" 502 150 "-" "-"
141.101.98.35 - - [10/Jun/2026:03:40:52 +0300] "GET /jp.php HTTP/1.1" 502 150 "-" "-"
141.101.98.35 - - [10/Jun/2026:03:40:52 +0300] "GET /tfm.php HTTP/1.1" 502 150 "-" "-"
141.101.98.35 - - [10/Jun/2026:03:40:53 +0300] "GET /admin-footer.php HTTP/1.1" 502 150 "-" "-"
...
show less
DDoS Attack
π³π±
COMPLEX
2026-04-19 04:17:57
(2 months ago)
Unsolicited TCP traffic | Action: DROP | Port 443
Phishing
πΊπΈ
TPI-Abuse
2026-04-09 01:21:14
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 21:21:07.052987 2026] [security2:error] [pid 2753982:tid 2753982] [client 141.101.98.35:9515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usebliss.ai"] [uri "/app/.env"] [unique_id "adb_A2WwrHNzz4jpnc6FpAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-09 00:20:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 20:20:36.991841 2026] [security2:error] [pid 566584:tid 566584] [client 141.101.98.35:10899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wimpy.jbaydeliveries.com"] [uri "/.env.old"] [unique_id "adbw1I30JfCbFe0IQy7EFwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 23:48:44
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 19:48:34.164720 2026] [security2:error] [pid 3036929:tid 3036929] [client 141.101.98.35:11760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tomorrowsdust.net"] [uri "/.env.container"] [unique_id "adbpUi22ryMdUHV2W1hNywAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 22:26:22
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 18:26:15.402213 2026] [security2:error] [pid 2757947:tid 2757947] [client 141.101.98.35:10457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gegraphics.biz"] [uri "/.env.orig"] [unique_id "adbWB7ASGytYpB6h_qwaLAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 16:14:53
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 12:14:41.186613 2026] [security2:error] [pid 2365716:tid 2365716] [client 141.101.98.35:10936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.vekk.org"] [uri "/srv/.env"] [unique_id "adZ-8T_m-x8r3faK-z78qgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 15:23:29
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 11:23:22.346081 2026] [security2:error] [pid 2086430:tid 2086430] [client 141.101.98.35:9461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stellwagenmusic.com.jimgrenier.com"] [uri "/.env.backup"] [unique_id "adZy6ttB6ecIptOZ61HQSgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 14:41:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 10:41:36.000882 2026] [security2:error] [pid 2763038:tid 2763038] [client 141.101.98.35:11963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paragontechusa.com"] [uri "/.env.container"] [unique_id "adZpINB27mI6rwDnebhRPwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 13:05:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 09:05:38.368239 2026] [security2:error] [pid 2596406:tid 2596406] [client 141.101.98.35:11541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beepainless.garyrankin.com"] [uri "/www/.env"] [unique_id "adZSon8ZkrrHtTyiyY2HpQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 12:14:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 08:14:11.113488 2026] [security2:error] [pid 2509820:tid 2509820] [client 141.101.98.35:11159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.hker.org"] [uri "/core/.env"] [unique_id "adZGk-ZLBQfZI4FOhw-ZxQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 08:53:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:52:53.294370 2026] [security2:error] [pid 2089581:tid 2089581] [client 141.101.98.35:9793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gunningphysio.com"] [uri "/srv/.env"] [unique_id "adYXZX_i14jlmDFsqdgBtgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 08:00:55
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 04:00:29.797686 2026] [security2:error] [pid 2038917:tid 2038917] [client 141.101.98.35:12000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldenstatealliance.com"] [uri "/.env2"] [unique_id "adYLHZUtKtYVznTOq8SUrwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-08 05:15:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 01:15:27.884553 2026] [security2:error] [pid 2105233:tid 2105233] [client 141.101.98.35:12155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.consolidatedoperationsgroup.com"] [uri "/.env"] [unique_id "adXkbxOBdn9PUjiH3Ggr-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-04-07 23:27:10
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 19:26:55.593045 2026] [security2:error] [pid 2205046:tid 2205046] [client 141.101.98.35:10232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.deindo.com"] [uri "/.env~"] [unique_id "adWSv6qIte9VFsbsHvM44gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack