🇯🇵
S.O.B.A. Dev.
2026-10-14 16:30:07
(14 hours ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇫🇷
dynamix
2026-10-14 13:45:56
(17 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-08 08:23:51
(6 days ago)
Multiple WAF Violations
Web App Attack
🇨🇭
backslash
2026-10-07 01:27:00
(1 week ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇫🇷
pm33
2026-10-06 14:57:49
(1 week ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇧🇪
madeit
2026-10-05 21:14:49
(1 week ago)
Web App Attack
🇫🇷
dynamix
2026-10-05 08:31:18
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
arsonist
2026-10-05 00:53:42
(1 week ago)
[fail2ban]
2026-10-05T00:53:41.807240+00:00 arson caddy[1712]: {"level":"info","ts":1791161621.80721 ...
show more
[fail2ban]
2026-10-05T00:53:41.807240+00:00 arson caddy[1712]: {"level":"info","ts":1791161621.8072147,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"141.101.68.208","remote_port":"10860","client_ip":"141.101.68.208","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/backend/.env","headers":{"X-Nextjs-Request-Id":["6aa7fa23"],"Cf-Ray":["a4587368483899bd-CDG"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, br"],"X-Forwarded-Proto":["https"],"Cf-Connecting-Ip":["34.155.172.123"],"Cf-Ipcountry":["FR"],"X-Forwarded-For":["34.155.172.123"],"Next-Action":["x"],"Accept":["*/*"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Visitor":["{\"scheme\":\"https\"}"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 01:29:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 141.101.68.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.68.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:29:15.460244 2026] [security2:error] [pid 6615:tid 6615] [client 141.101.68.208:11316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deploy6tharmy.com"] [uri "/.git/config"] [unique_id "arxl6_h6T3rfGc8OV3rRLAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 17:33:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 141.101.68.208 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.68.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 13:33:50.640979 2026] [security2:error] [pid 28199:tid 28199] [client 141.101.68.208:9929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artaquiouno5.ipostsocialmedia.com"] [uri "/.git/config"] [unique_id "arqk_hY_i7ZyunbYoqeD1QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-27 16:32:39
(2 weeks ago)
Web App Attack
🇭🇺
bcsaba
2026-09-27 00:30:44
(2 weeks ago)
Probing for .git:
141.101.68.208 - - [27/Sep/2026:02:30:43 +0200] "GET /.git/config HTTP/2.0" 403 14 ...
show more
Probing for .git:
141.101.68.208 - - [27/Sep/2026:02:30:43 +0200] "GET /.git/config HTTP/2.0" 403 146 "-" "curl/8.4.0"
show less
Web App Attack
🇫🇷
dynamix
2026-09-21 19:06:16
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
arsonist
2026-09-20 20:59:49
(3 weeks ago)
[fail2ban]
2026-09-20T20:59:48.950276+00:00 arson caddy[1890453]: {"level":"info","ts":1789937988.95 ...
show more
[fail2ban]
2026-09-20T20:59:48.950276+00:00 arson caddy[1890453]: {"level":"info","ts":1789937988.9502168,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"141.101.68.208","remote_port":"10876","client_ip":"141.101.68.208","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.aws/.env","headers":{"Cf-Connecting-Ip":["34.38.113.44"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-For":["34.38.113.44"],"Accept-Encoding":["gzip, br"],"Cdn-Loop":["cloudflare; loops=1"],"X-Forwarded-Proto":["https"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"],"Cf-Ray":["a3e3c18eb96099d4-CDG"],"Cf-Ipcountry":["BE"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","duration":0.000210476,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-S
...
show less
Bad Web Bot
🇧🇪
madeit
2026-09-18 19:51:24
(3 weeks ago)
Web App Attack
