๐บ๐ธ
TPI-Abuse
2026-07-30 00:36:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 20:36:46.027923 2026] [security2:error] [pid 1471555:tid 1471601] [client 108.162.237.81:10796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "npaccountants.org"] [uri "/.env.bak"] [unique_id "amqcngnVMjHUtTD-pGoapAAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-29 22:08:18
(2 days ago)
Auto-ban: >3000 req/min op 2026-07-29
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-29 17:00:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 13:00:07.475722 2026] [security2:error] [pid 3565152:tid 3565152] [client 108.162.237.81:9776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1.biz"] [uri "/.env.bak"] [unique_id "amoxlybj9qEh-rL03T8sTAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
acadeova
2026-04-17 22:42:52
(3 months ago)
๐จ Recon detected (nft drop)
SRC=108.162.237.81
Observed=TCP dpt=80 in=enp0s6 ttl=55
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=108.162.237.81
Observed=TCP dpt=80 in=enp0s6 ttl=55
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐บ๐ธ
myagent.site
2026-04-04 00:47:03
(3 months ago)
Blocking for trying to access an exploit file: /.env.local.backup
Hacking
๐บ๐ธ
myagent.site
2026-03-30 17:12:38
(4 months ago)
Blocking for trying to access an exploit file: /.env.old
Hacking
๐ฉ๐ช
acadeova
2026-03-14 13:42:08
(4 months ago)
๐จ Recon detected (nft drop)
SRC=108.162.237.81
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=108.162.237.81
Observed=TCP dpt=80 in=enp0s6 ttl=56
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
๐ฌ๐ง
User
2025-09-23 18:11:44
(10 months ago)
Blocked by UFW [443/tcp]
Source port: 45393
TTL: 52
Packet length: 60
TOS: 0x00
This report was gen ...
show more
Blocked by UFW [443/tcp]
Source port: 45393
TTL: 52
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
Anonymous
2025-07-20 06:21:09
(1 year ago)
2025-07-20 04:01:11,820 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 108.162.237.8 ...
show more
2025-07-20 04:01:11,820 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 108.162.237.81
2025-07-20 08:21:08,726 fail2ban.actions [841]: NOTICE [nginx-bad-request] Ban 108.162.237.81
...
show less
Port Scan
Brute-Force
Bad Web Bot
๐ฏ๐ต
S.O.B.A. Dev.
2025-07-01 04:41:01
(1 year ago)
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
2025-06-24 06:35:39
(1 year ago)
[Tue Jun 24 08:35:38.638198 2025] [authz_core:error] [pid 28184] [client 108.162.237.81:50808] AH016 ...
show more
[Tue Jun 24 08:35:38.638198 2025] [authz_core:error] [pid 28184] [client 108.162.237.81:50808] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jun 24 08:35:38.784996 2025] [authz_core:error] [pid 28184] [client 108.162.237.81:50808] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jun 24 08:35:38.916996 2025] [authz_core:error] [pid 28184] [client 108.162.237.81:50808] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-21 07:51:18
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 03:51:14.578679 2025] [security2:error] [pid 3491995:tid 3491995] [client 108.162.237.81:22468] [client 108.162.237.81] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodrigoaldecoa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodrigoaldecoa.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z90acs3yBhwp-UauVRaQygAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Study Bitcoin ๐ค
2025-02-16 14:58:44
(1 year ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Study Bitcoin ๐ค
2025-01-21 12:22:31
(1 year ago)
Port probe to tcp/443 (https)
[srv130]
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-16 20:02:18
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.237.81 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 16 16:02:10.901696 2024] [security2:error] [pid 28457] [client 108.162.237.81:61926] [client 108.162.237.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.easy-byte.net"] [uri "/.git/config"] [unique_id "ZpbRwoFwCCJTtPVyP2vx4QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack