Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
179
times from
41 distinct
sources.
141.101.68.191 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 29
reports;
France
with 16
reports;
Brazil
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
49
times;
Web App Attack
36
times;
Bad Web Bot
33
times;
SSH
22
times;
Hacking
3
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[02/Oct/2026:22:50:25 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.en ...
show more[02/Oct/2026:22:50:25 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.example HTTP/1.1
show less
[30/Sep/2026:12:38:38 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /con ...
show more[30/Sep/2026:12:38:38 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /config.php HTTP/1.1
show less
2026-09-12T17:05:51.705814+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[82943]: Invalid user dep ...
show more2026-09-12T17:05:51.705814+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[82943]: Invalid user deploy from 141.101.68.191 port 53469
2026-09-12T17:05:53.446575+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[82943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191
2026-09-12T17:05:55.174085+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[82943]: Failed password for invalid user deploy from 141.101.68.191 port 53469 ssh2
...
show less
2026-09-11T16:46:44.032064+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4081818]: pam_unix(sshd: ...
show more2026-09-11T16:46:44.032064+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4081818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191
2026-09-11T16:46:46.001910+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4081818]: Failed password for invalid user caiyongq from 141.101.68.191 port 56044 ssh2
2026-09-11T16:54:53.258172+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4083423]: Invalid user cak from 141.101.68.191 port 60105
...
show less
2026-09-11T08:50:10.232725+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4022810]: pam_unix(sshd: ...
show more2026-09-11T08:50:10.232725+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4022810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191
2026-09-11T08:50:12.105960+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4022810]: Failed password for invalid user openldap from 141.101.68.191 port 61226 ssh2
2026-09-11T08:59:17.641004+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[4024133]: Invalid user libuuid from 141.101.68.191 port 51623
...
show less
2026-09-10T23:06:56.207936+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3942556]: pam_unix(sshd: ...
show more2026-09-10T23:06:56.207936+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3942556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191
2026-09-10T23:06:58.199381+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3942556]: Failed password for invalid user lxw from 141.101.68.191 port 60712 ssh2
2026-09-10T23:08:49.832184+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[3942837]: Invalid user wyl from 141.101.68.191 port 55122
...
show less
[02/Sep/2026:08:55:56 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.gi ...
show more[02/Sep/2026:08:55:56 +0300] -- 141.101.68.191 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
show less
(mod_security) mod_security (id:210492) triggered by 141.101.68.191 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:210492) triggered by 141.101.68.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:22:23.321191 2026] [security2:error] [pid 5012:tid 5012] [client 141.101.68.191:9244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "venturecg.com"] [uri "/.git/config"] [unique_id "apaLP47Fa0U_vGNrUE1vJwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show moreProbing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Aug 31, 03:24 UTC. Origin: France, Paris.
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-08-31T03:41:48.407879+02:00 nimbus sshd[543392]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-08-31T03:41:48.407879+02:00 nimbus sshd[543392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191 user=root
2026-08-31T03:41:50.365005+02:00 nimbus sshd[543392]: Failed password for root from 141.101.68.191 port 57124 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-08-30T20:31:23.792310+02:00 nimbus sshd[526194]: Invalid user test2 from 141.101.68.191 port 56 ...
show more2026-08-30T20:31:23.792310+02:00 nimbus sshd[526194]: Invalid user test2 from 141.101.68.191 port 56177
2026-08-30T20:31:23.794257+02:00 nimbus sshd[526194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191
2026-08-30T20:31:25.764136+02:00 nimbus sshd[526194]: Failed password for invalid user test2 from 141.101.68.191 port 56177 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-08-30T19:49:52.503801+02:00 nimbus sshd[524787]: Failed password for root from 141.101.68.191 p ...
show more2026-08-30T19:49:52.503801+02:00 nimbus sshd[524787]: Failed password for root from 141.101.68.191 port 65158 ssh2
2026-08-30T19:53:39.833066+02:00 nimbus sshd[524909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.101.68.191 user=root
2026-08-30T19:53:41.994205+02:00 nimbus sshd[524909]: Failed password for root from 141.101.68.191 port 64658 ssh2
...
show less
