๐ต๐ฑ
sefinek.net
2026-06-16 17:17:22
(1 week ago)
Blocked by UFW on PL02 [2078/tcp] | SPT: 21556 | TTL: 37 | LEN: 60 | TOS: 0x00 โข Reported by: github ...
show more
Blocked by UFW on PL02 [2078/tcp] | SPT: 21556 | TTL: 37 | LEN: 60 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ฌ๐ง
PeravixGroup
2026-06-02 14:11:45
(3 weeks ago)
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ...
show more
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
show less
Port Scan
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-06-02 13:20:09
(3 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marcin Stepien
2026-06-02 12:34:30
(3 weeks ago)
Hit honeypot endpoint /.git/head. Automated scanner/bot detected.
Bad Web Bot
Web App Attack
Anonymous
2026-06-02 12:29:34
(3 weeks ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
๐น๐ญ
Sawasdee
2026-06-02 12:16:45
(3 weeks ago)
Port Scan
...
Port Scan
Anonymous
2026-06-02 12:03:41
(3 weeks ago)
PORT & IP Scan.
Port Scan
Brute-Force
๐ณ๐ฑ
i-turnradio.nl
2026-06-02 11:24:56
(3 weeks ago)
2026-06-02 @ 13:24:56 (CET) ~ Blocked for trying to access: /.env.production
Web App Attack
๐บ๐ธ
SketchyDude
2026-06-02 10:35:25
(3 weeks ago)
Banned by Fail2Ban jail: apache-auth
Brute-Force
Web App Attack
๐ฆ๐น
mindrider
2026-06-02 10:26:53
(3 weeks ago)
172.184.211.92 - - [02/Jun/2026:12:26:49 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5. ...
show more
172.184.211.92 - - [02/Jun/2026:12:26:49 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
172.184.211.92 - - [02/Jun/2026:12:26:49 +0200] "GET /.git/config HTTP/1.1" 404 1596 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 08:45:32
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.211.92 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.211.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 04:45:25.280550 2026] [security2:error] [pid 20754:tid 20754] [client 172.184.211.92:18162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.167"] [uri "/.git/HEAD"] [unique_id "ah6YJZ_lsOCBbYv1RVGRIwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 08:05:51
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.184.211.92 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.184.211.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 04:05:47.186280 2026] [security2:error] [pid 15684:tid 15684] [client 172.184.211.92:37944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.37"] [uri "/.git/HEAD"] [unique_id "ah6O25ZvsaHnuCTvHRGx_wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-02 08:05:11
(3 weeks ago)
172.184.211.92 - - [02/Jun/2026:05:05:10 -0300] "GET /.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 ...
show more
172.184.211.92 - - [02/Jun/2026:05:05:10 -0300] "GET /.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
๐บ๐ธ
xmission.com
2026-06-02 08:04:56
(3 weeks ago)
Blocked by UFW (TCP on 2086)
Source port: 38099
TTL: 52
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 2086)
Source port: 38099
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 172.184.211.92) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ฉ๐ช
EGP Abuse Dept
2026-06-02 07:57:23
(3 weeks ago)
Scanning for web/db/file exploits on tpc-001.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack