🇺🇸
xmission.com
2026-06-12 12:36:19
(3 days ago)
Blocked by UFW (TCP on 1)
Source port: 53580
TTL: 118
Packet length: 52
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 1)
Source port: 53580
TTL: 118
Packet length: 52
TOS: 0x08
This report (for 102.129.234.147) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇮🇱
spd.co.il
2026-04-15 05:04:17
(2 months ago)
Web application attack detected
Hacking
Web App Attack
2026-04-13 16:32:27
(2 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
2026-04-13 15:03:33
(2 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇳🇱
JCB
2026-04-13 14:44:00
(2 months ago)
102.129.234.147 - - [13/Apr/2026:04:43:18 +0300] "GET /.env HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Maci ...
show more
102.129.234.147 - - [13/Apr/2026:04:43:18 +0300] "GET /.env HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-04-13 14:04:48
(2 months ago)
Attempts against HTTP/HTTPS
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 06:42:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 02:42:15.960496 2026] [security2:error] [pid 421537:tid 421537] [client 102.129.234.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abdulhameeds.art"] [uri "/.env"] [unique_id "adyQR0O95xjwmP05zFPvQwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-04-13 06:11:38
(2 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-04-13 06:03:18
(2 months ago)
102.129.234.147 - - [13/Apr/2026:08:03:17 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Maci ...
show more
102.129.234.147 - - [13/Apr/2026:08:03:17 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇨🇦
Dunham Support
2026-04-13 05:59:31
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 102.129.234.147 (US/United States/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-04-13 05:53:37
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 01:53:31.089338 2026] [security2:error] [pid 3067700:tid 3067700] [client 102.129.234.147:60244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techsunlimited.net"] [uri "/.env"] [unique_id "adyE2-MnNHW_tap8Uxga1QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-04-13 05:39:59
(2 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
mawan
2026-04-13 05:11:56
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 04:59:19
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 102.129.234.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 00:59:12.276574 2026] [security2:error] [pid 1905124:tid 1905124] [client 102.129.234.147:57752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yourbrandhere.com"] [uri "/.env"] [unique_id "adx4IPYZAoO5tk1rt7ZbwgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-04-13 04:52:16
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 102.129.234.147 (US/United States/-)
SQL Injection