This IP address has been reported a total of
10
times from
10 distinct
sources.
102.98.125.69 was first reported on
October 15th 2026 , and the most recent report was
4 hours ago Switzerland
with 3
reports;
Germany
with 2
reports;
Belgium
with 1
report.
The most common categories in these recent reports were:
Web App Attack
8
times;
Hacking
3
times;
Port Scan
2
times;
Bad Web Bot
2
times;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
jebla.ch
2026-10-18 08:23:33
(4 hours ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ...
show more
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-10-18 08:13 UTC.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:11:19
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 102.98.125.69 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 102.98.125.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:11:16.237699 2026] [security2:error] [pid 28000:tid 28000] [client 102.98.125.69:55899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorhouse.ch"] [uri "/.env"] [unique_id "atQqxBuA39fzdvBmgmS33AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-10-18 01:56:24
(11 hours ago)
Multiple WAF Violations
Web App Attack
2026-10-17 17:07:01
(20 hours ago)
[web.zebs.ch] httpd-config-scan: sites=zebs.ch; logs=/var/log/httpd/domains/zebs.ch.log; samples=/.e ...
show more
[web.zebs.ch] httpd-config-scan: sites=zebs.ch; logs=/var/log/httpd/domains/zebs.ch.log; samples=/.env | fast_lane=true kernel_at=2026-10-17T17:04:45+00:00 | requests=1
show less
Hacking
Web App Attack
🇨🇭
zynex
2026-10-17 16:49:50
(20 hours ago)
URL Probing: /de/.env
Web App Attack
🇩🇪
sternwart
2026-10-17 16:03:21
(21 hours ago)
Automatisch erkannt: Zugriff auf /.env (alpasana.ch)
Web App Attack
Bad Web Bot
🇨🇭
ALPHANET
2026-10-17 15:53:21
(21 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇧🇪
voormedia
2026-10-17 15:32:51
(21 hours ago)
Accessed trap at '/.env'
Web App Attack
🇫🇷
Dampen59
2026-10-16 18:43:25
(1 day ago)
(smtpauth) Failed SMTP AUTH login from 102.98.125.69 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 102.98.125.69 (MA/Morocco/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-10-16 20:40:05 dovecot_plain authenticator failed for H=(DESKTOP-RG6DRNO.Home) [102.98.125.69]:58987: 535 Incorrect authentication data ([email protected] )
2026-10-16 20:40:11 dovecot_login authenticator failed for H=(DESKTOP-RG6DRNO.Home) [102.98.125.69]:58987: 535 Incorrect authentication data ([email protected] )
2026-10-16 20:40:47 dovecot_plain authenticator failed for H=(DESKTOP-RG6DRNO.Home) [102.98.125.69]:53363: 535 Incorrect authentication data ([email protected] )
2026-10-16 20:40:53 dovecot_login authenticator failed for H=(DESKTOP-RG6DRNO.Home) [102.98.125.69]:53363: 535 Incorrect authentication data ([email protected] )
2026-10-16 20:43:21 dovecot_plain authenticator failed for H=(DESKTOP-RG6DRNO.Home) [102.98.125.69]:62102: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇳🇱
EGP Abuse Dept
2026-10-15 12:25:01
(3 days ago)
Unauthorized connection to FTP port 21
Port Scan
Hacking
Showing 1 to
10
of 10 reports
