๐ช๐ธ
robotstxt
2026-10-15 06:00:20
(48 minutes ago)
141.101.98.17 - - [15/Oct/2026:05:59:53 +0000] "GET /.git/HEAD HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Win ...
show more
141.101.98.17 - - [15/Oct/2026:05:59:53 +0000] "GET /.git/HEAD HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" "2a06:98c0:3600::103" edge="141.101.98.17"
141.101.98.17 - - [15/Oct/2026:05:59:54 +0000] "GET /.git/config HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "2a06:98c0:3600::103" edge="141.101.98.17"
141.101.98.17 - - [15/Oct/2026:05:59:54 +0000] "GET /.git/HEAD HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" "2a06:98c0:3600::103" edge="141.101.98.17"
141.101.98.17 - - [15/Oct/2026:05:59:54 +0000] "GET /.terraform/terraform.tfstate.backup HTTP/2.0" 403 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "2a06:98c0:3600::103" edge="141.101.98.17"
141.101.98.17 - - [15/Oct/2026:05:59:54 +0000] "GET /.npmrc HTTP/2.0" 403 0 "-" "Moz
...
show less
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-15 05:16:18
(1 hour ago)
3 attacks on password/key grabbing URLs:
GET /.ssh/id_ed25519 HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-15 01:22:13
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:22:02.158492 2026] [security2:error] [pid 32114:tid 32114] [client 141.101.98.17:12764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brittaniaenterprises.com"] [uri "/.git/config"] [unique_id "atAqugr8I-VGJ8KgYMOctAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
rellik
2026-10-14 19:42:00
(11 hours ago)
Mass Scanning Critical Directories, Potential Part of BotNet
Hacking
DDoS Attack
Brute-Force
Web App Attack
๐ฎ๐น
Inartis
2026-10-14 19:10:35
(11 hours ago)
141.101.98.17 - - [14/Oct/2026:21:10:32 +0200] "GET /.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows ...
show more
141.101.98.17 - - [14/Oct/2026:21:10:32 +0200] "GET /.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-14 14:50:43
(15 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
lightaffaire
2026-10-14 14:36:09
(16 hours ago)
Oct 14 16:36:08 www.lightaffaire.com 141.101.98.17 - - [14/Oct/2026:16:36:08 +0200] "GET /.git/HEAD ...
show more
Oct 14 16:36:08 www.lightaffaire.com 141.101.98.17 - - [14/Oct/2026:16:36:08 +0200] "GET /.git/HEAD HTTP/2.0" 404 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-14 13:43:48
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐ฉ
securejdprop
2026-10-14 13:23:16
(17 hours ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
๐ฉ๐ช
on-com
2026-10-14 13:19:23
(17 hours ago)
URL scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 12:05:34
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:05:30.795965 2026] [security2:error] [pid 15430:tid 15430] [client 141.101.98.17:13388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemoulinavent.org"] [uri "/.env.production"] [unique_id "as9wCoBEYigS8RAd2uDfJwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 08:15:10
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:14:57.276451 2026] [security2:error] [pid 2609:tid 2609] [client 141.101.98.17:10202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazardvillefire.org"] [uri "/.env.backup"] [unique_id "as86Ad9XErSXkIX3llmA3QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-14 07:49:53
(22 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 06:45:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 141.101.98.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:45:04.461396 2026] [security2:error] [pid 3439:tid 3439] [client 141.101.98.17:11323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badwaterclaims.com"] [uri "/.env.save"] [unique_id "as8k8P58Gk0d4MSaVz0B2gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
raph
2026-10-14 05:20:33
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack