This IP address has been reported a total of
13
times from
9 distinct
sources.
141.98.252.226 was first reported on
May 5th 2024 , and the most recent report was
3 days ago Germany
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-06 05:09:20
(3 days ago)
Aggressive web scan
Web App Attack
🇵🇹
Information Security
2026-03-01 06:23:36
(7 months ago)
Web App Attack
Web App Attack
🇺🇸
fortypoundhead
2026-02-21 22:23:26
(7 months ago)
SQL Injection Attempt
SQL Injection
Web App Attack
🇫🇷
Security_Whaller
2026-01-29 12:05:40
(8 months ago)
Malicious activity detected on Honeypot.
Hacking
Brute-Force
Web App Attack
🇨🇿
0x44
2024-11-05 07:33:01
(1 year ago)
141.98.252.226 [04/Nov/2024 * Spam host detected, probing for vulnerabilities]
Web Spam
Exploited Host
Web App Attack
🇩🇪
CELOS-SOC
2024-08-27 07:33:55
(2 years ago)
Multiple Unauthorized SSLVPN Login Attempts
Hacking
Brute-Force
🇩🇪
CELOS-SOC
2024-08-26 07:04:22
(2 years ago)
Multiple Unauthorized SSLVPN Login Attempts
Hacking
Brute-Force
2024-08-26 06:37:37
(2 years ago)
Unauthorized VPN login attempts
Hacking
Brute-Force
🇫🇷
JA
2024-08-15 14:00:37
(2 years ago)
Multiple Unauthorized SSLVPN Login Attempts
VPN IP
Exploited Host
🇫🇷
JA
2024-08-15 14:00:37
(2 years ago)
Multiple Unauthorized SSLVPN Login Attempts
VPN IP
Exploited Host
🇪🇸
el-brujo
2024-05-06 00:53:00
(2 years ago)
06/May/2024:02:52:59.997584 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
06/May/2024:02:52:59.997584 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 141.98.252.226] ModSecurity: Warning. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1064"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".dll"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "cli-5b7ed999.ast.adamo.es"] [uri "/saw.dll"] [uni
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2024-05-05 18:20:10
(2 years ago)
[Sun May 05 20:17:24.011054 2024] [proxy_fcgi:error] [pid 1923574:tid 1923713] [client 141.98.252.22 ...
show more
[Sun May 05 20:17:24.011054 2024] [proxy_fcgi:error] [pid 1923574:tid 1923713] [client 141.98.252.226:60980] AH01071: Got error 'Primary script unknown'
[Sun May 05 20:20:10.144980 2024] [cgid:error] [pid 1923738:tid 1923861] [client 141.98.252.226:42518] AH01264: script not found or unable to stat: /home/alex/cgi-bin/rpc
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2024-05-05 16:01:22
(2 years ago)
05/May/2024:18:01:22.203179 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
05/May/2024:18:01:22.203179 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 141.98.252.226] ModSecurity: Warning. Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "178"] [id "920170"] [msg "GET or HEAD Request with Body Content"] [data "50"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [hostname "cli-5b7ed999.ast.adamo.es"] [uri "/cgi-bin/cstecgi.cgi"] [unique_id "ZjetUqQEPwvaNsZ0SLlIcwAAAC4"]
...
show less
Hacking
Web App Attack
Showing 1 to
13
of 13 reports
