🇬🇧
Axel
2026-10-12 20:50:43
(1 day ago)
Blocked by UFW on BGPGB [80/tcp] | SPT: 9642 | TTL: 57 | LEN: 60 | TOS: 0x00 • Reported by: github.c ...
show more
Blocked by UFW on BGPGB [80/tcp] | SPT: 9642 | TTL: 57 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇧🇪
madeit
2026-10-11 16:52:57
(2 days ago)
Web App Attack
🇧🇪
madeit
2026-09-26 22:36:58
(2 weeks ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-20 21:59:29
(3 weeks ago)
Auto-ban: >3000 req/min op 2026-09-20
Web App Attack
SSH
Hacking
🇧🇪
madeit
2026-09-18 22:50:31
(3 weeks ago)
Web App Attack
🇵🇱
MatStef132
2026-08-28 19:53:57
(1 month ago)
MatShield L7: blocked on api.klovy.chat (ua-quarantined)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-17 03:46:48
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:46:39.541399 2026] [security2:error] [pid 10982:tid 10987] [client 172.68.242.16:12678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.atdotorg.org"] [uri "/.git/config"] [unique_id "aoKEH5LIT0EU9t4xY_j9PgAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 02:04:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 22:04:43.873514 2026] [security2:error] [pid 11051:tid 11051] [client 172.68.242.16:9669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pozzolan.org"] [uri "/.git/config"] [unique_id "aoJsO-i9cSRTYSUOfKOF2wAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-16 15:40:21
(1 month ago)
Web App Attack
🇮🇪
eyesilyurt
2026-08-13 19:14:53
(2 months ago)
p- login authenticator failed Incorrect authentication data
Brute-Force
SSH
🇮🇪
eyesilyurt
2026-08-04 11:22:42
(2 months ago)
p- login authenticator failed Incorrect authentication data
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-07 17:32:02
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.242.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:31:45.613667 2026] [security2:error] [pid 28572:tid 28572] [client 172.68.242.16:12866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tpdtuberental.com"] [uri "/.env"] [unique_id "afzMgT38ScgUdCIYPRQOsgAAAAo"], referer: https://www.google.com/search?q=mail.tpdtuberental.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
abdubhai
2026-04-23 11:18:54
(5 months ago)
172.68.242.16 - - [23/Apr/2026:1
...
Brute-Force
🇮🇩
sockominfo
2026-04-14 05:00:42
(6 months ago)
Access to sensitive configuration files detected.. Threat Score: 4.6/10 (MEDIUM). Confidence: 40%. C ...
show more
Access to sensitive configuration files detected.. Threat Score: 4.6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 2.9/10 (Low). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-04-14 02:00:39
(6 months ago)
Access to sensitive configuration files detected., Multiple Access to sensitive files in 60s, Access ...
show more
Access to sensitive configuration files detected., Multiple Access to sensitive files in 60s, Access to sensitive files detected w/ specific boundary.. Threat Score: 9.5/10 (CRITICAL). Confidence: 85%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 99%. MITRE ATT&CK: T1210 (Exploitation of Remote Services). Tactic: TA0001. Freshness: Moderate. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
