2026-04-12 05:43:05
(1 month ago)
Attempt to scan vulnerabilities
Hacking
2026-03-10 07:02:52
(2 months ago)
Forum/form spam
Web Spam
🇳🇱
i-turnradio.nl
2026-01-31 04:01:47
(4 months ago)
2026-01-31 05:01:47 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
2026-01-30 04:25:28
(4 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-01-02 19:44:38
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 14:44:32.402029 2026] [security2:error] [pid 31875:tid 31875] [client 216.26.235.68:46247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chatsupply.us"] [uri "/.svn/wc.db"] [unique_id "aVggIOY_yZWxrARVaQBJ6gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-01-01 13:40:06
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇦
Tanados
2025-12-30 10:21:35
(5 months ago)
Blocked by UFW [80/tcp]
Source port: 23625
TTL: 52
Packet length: 60
TOS: 0x00
This report was gene ...
show more
Blocked by UFW [80/tcp]
Source port: 23625
TTL: 52
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
myagent.site
2025-12-29 08:56:03
(5 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
🇺🇸
TPI-Abuse
2025-12-29 06:33:32
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:33:28.521663 2025] [security2:error] [pid 9476:tid 9476] [client 216.26.235.68:45391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "389thbg.com"] [uri "/.env"] [unique_id "aVIguHYuPavO-FnBJW06KAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-28 12:07:45
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 07:07:41.249245 2025] [security2:error] [pid 9807:tid 9827] [client 216.26.235.68:23241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybeerestaurant.com"] [uri "/wp-config.php"] [unique_id "aVEdjflnBAa9_vdRnMrY-AAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-17 20:21:26
(5 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-12-12 14:52:25
(5 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-11-25 06:09:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:09:42.374763 2025] [security2:error] [pid 26548:tid 26548] [client 216.26.235.68:21173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xmas.martinka.org"] [uri "/.svn/wc.db"] [unique_id "aSVIJpwRlhwEhd04GdZzRQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:56:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:56:04.383511 2025] [security2:error] [pid 14975:tid 14975] [client 216.26.235.68:10601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgesrouquier.williamgilcher.com"] [uri "/.env"] [unique_id "aSU25EJuQ-HKpeVieeMCVgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:24:46
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.235.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:24:38.427487 2025] [security2:error] [pid 1233:tid 1233] [client 216.26.235.68:59641] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.livesteamtracks.info"] [uri "/.env"] [unique_id "aSUhdlEd1MHU3YIrjwbT7gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack