🇺🇸
Cherryh4ck
2026-09-05 19:04:58
(5 hours ago)
Blocked by UFW [25565/tcp] | SPT: 48274 | TTL: 54 | LEN: 60 | TOS: 0x00 • Reported by: github.com/se ...
show more
Blocked by UFW [25565/tcp] | SPT: 48274 | TTL: 54 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇳🇱
Maurice
2026-08-29 06:36:08
(1 week ago)
Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP
Reported by: https://github. ...
show more
Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Port Scan
🇲🇾
Rizzy
2026-08-21 06:14:52
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-18 06:08:06
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 06:50:32
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 02:50:25.807083 2026] [security2:error] [pid 1102967:tid 1102967] [client 104.28.210.148:61712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlifecommunitycare.org"] [uri "/.env"] [unique_id "adSpMWsrhq3QKiWT48eWeAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 05:44:30
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 01:44:21.568228 2026] [security2:error] [pid 436651:tid 436745] [client 104.28.210.148:49624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orthopedica.org"] [uri "/.env"] [unique_id "adSZtTB8sfXokoSKgQn6RAAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-04-07 05:36:43
(4 months ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 02:33:22
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 22:33:16.593857 2026] [security2:error] [pid 833859:tid 833859] [client 104.28.210.148:16944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/.env"] [unique_id "adRs7MR6mLawTJqhjJeIkQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
rellik
2026-04-07 01:51:00
(4 months ago)
Scanning Critical Directory
Hacking
Web App Attack
🇷🇺
DZBOT
2026-04-06 05:54:04
(4 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 05:19:23
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 01:19:17.914362 2026] [security2:error] [pid 29516:tid 29516] [client 104.28.210.148:44420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chezlubacov.org"] [uri "/.env"] [unique_id "adNCVTY1nyyNODtK-oh2eAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-04-06 04:51:53
(4 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
Carsten
2026-04-06 01:02:39
(4 months ago)
HEAD [.env]
Port Scan
🇺🇸
TPI-Abuse
2026-04-05 23:46:15
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 19:46:11.622431 2026] [security2:error] [pid 19407:tid 19407] [client 104.28.210.148:58275] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aimer.es"] [uri "/.env"] [unique_id "adL0Q1un3_7XnKWsk45KXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-05 21:36:34
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.28.210.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 17:36:29.942326 2026] [security2:error] [pid 24741:tid 24741] [client 104.28.210.148:57832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "math1on1.net"] [uri "/.env"] [unique_id "adLV3RsTfyoZoK1LUCaIGgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
