π§πͺ
madeit
2026-10-01 14:18:22
(6 days ago)
Web App Attack
π»π³
trung.fun
2026-09-30 10:33:44
(1 week ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
Anonymous
2026-09-26 19:16:33
(1 week ago)
[Sat Sep 26 21:16:31.967982 2026] [authz_core:error] [pid 24191] [client 172.71.158.102:13611] AH016 ...
show more
[Sat Sep 26 21:16:31.967982 2026] [authz_core:error] [pid 24191] [client 172.71.158.102:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Sep 26 21:16:32.503138 2026] [authz_core:error] [pid 24191] [client 172.71.158.102:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat Sep 26 21:16:32.859856 2026] [authz_core:error] [pid 24191] [client 172.71.158.102:13611] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-03-26 17:51:54
(6 months ago)
172.71.158.102 - - [26/Mar/2026:19:51:38 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-conten ...
show more
172.71.158.102 - - [26/Mar/2026:19:51:38 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-content/themes/finley/v3.php HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.158.102 - - [26/Mar/2026:19:51:39 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-content/themes/finley/system.php HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.158.102 - - [26/Mar/2026:19:51:39 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-content/themes/finley/sitesdefaultfilesup.php HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.158.102 - - [26/Mar/2026:19:51:41 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-content/themes/finley/4uil2.php HTTP/1.1" 404 124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
172.71.158.102 - - [26/Mar/2026:19:51:41 +0200] "GET /.well-known/acme-challenge/cloud.php/wp-content/themes/finley/h7.php HTTP/1.1" 404 124 "-"
...
show less
Brute-Force
Web App Attack
πΊπΈ
mawan
2026-03-01 14:39:40
(7 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
π§π·
leolemos
2025-11-01 08:07:53
(11 months ago)
[Sat Nov 01 05:07:44.568992 2025] [proxy_fcgi:error] [pid 4143198] [client 172.71.158.102:11627] AH0 ...
show more
[Sat Nov 01 05:07:44.568992 2025] [proxy_fcgi:error] [pid 4143198] [client 172.71.158.102:11627] AH01071: Got error 'Primary script unknown'
[Sat Nov 01 05:07:45.775024 2025] [proxy_fcgi:error] [pid 4143198] [client 172.71.158.102:11627] AH01071: Got error 'Primary script unknown'
[Sat Nov 01 05:07:51.438251 2025] [proxy_fcgi:error] [pid 4143194] [client 172.71.158.102:11629] AH01071: Got error 'Primary script unknown'
show less
Brute-Force
Web App Attack
πΊπΈ
creations.works
2025-09-29 12:56:28
(1 year ago)
Blocked by UFW on vds [80/tcp]
Source port: 40048
TTL: 54
Packet length: 60
TOS: 0x00
This report w ...
show more
Blocked by UFW on vds [80/tcp]
Source port: 40048
TTL: 54
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
πΊπΈ
mawan
2025-08-01 09:54:55
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
π³π±
Study Bitcoin π€
2025-05-12 15:30:38
(1 year ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
π³π±
Study Bitcoin π€
2025-05-09 21:54:43
(1 year ago)
Port probe to tcp/80 (http)
[srv125]
Port Scan
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-05-02 04:27:41
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 172.71.158.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.158.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 02 00:27:35.434503 2025] [security2:error] [pid 1506556:tid 1506556] [client 172.71.158.102:63826] [client 172.71.158.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swarnar.com"] [uri "/.env"] [unique_id "aBRJt9uoe5n-OYnQNHCvZAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
no1knows.com
2025-04-30 07:05:07
(1 year ago)
2025/04/30 08:05:04 [error] 1787918#1787918: *54335 FastCGI sent in stderr: "Primary script unknown" ...
show more
2025/04/30 08:05:04 [error] 1787918#1787918: *54335 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.158.102, server: _, request: "GET /uploads/up.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/04/30 08:05:04 [error] 1787918#1787918: *54335 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.158.102, server: _, request: "GET /wp-admin/css/index.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
2025/04/30 08:05:04 [error] 1787918#1787918: *54335 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.71.158.102, server: _, request: "GET /wp-includes/SimplePie/plugins.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "no1knows.com"
...
show less
Brute-Force
Bad Web Bot
π©πͺ
LRob
2025-04-29 05:45:03
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
Anonymous
2025-04-19 14:49:17
(1 year ago)
Excessive crawling/scraping
Hacking
Brute-Force
πΊπΈ
mawan
2025-04-10 13:27:30
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack