🇫🇷
Sklurk
2026-07-08 00:59:10
(3 days ago)
Web App Attack
Web App Attack
2026-02-11 09:01:00
(5 months ago)
SMS pumping
DDoS Attack
VPN IP
Bad Web Bot
Web App Attack
2026-01-05 20:37:29
(6 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp
show less
Hacking
Brute-Force
🇺🇸
myagent.site
2025-12-25 05:07:27
(6 months ago)
Blocking for trying to access an exploit file: /wp//installer.php
Hacking
🇺🇸
xmission.com
2025-12-23 18:12:36
(6 months ago)
Blocked by UFW (TCP on 80)
Source port: 40963
TTL: 52
Packet length: 60
TOS: 0x00
This report (for ...
show more
Blocked by UFW (TCP on 80)
Source port: 40963
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 216.26.246.20) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇺🇸
etu brutus
2025-12-20 14:25:45
(6 months ago)
216.26.246.20 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
2025-12-15 04:55:02
(6 months ago)
wordpress-trap
Web App Attack
🇬🇧
CrystalMaker
2025-12-13 05:03:42
(6 months ago)
PHP vulnerability scan - GET /old/kickstart.php
Web App Attack
2025-12-09 00:30:01
(7 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-27 19:53:27
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:53:23.824800 2025] [security2:error] [pid 21411:tid 21411] [client 216.26.246.20:21299] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonnesfrequences.com"] [uri "/.git/HEAD"] [unique_id "aSisMxHrkYWpjrT5RC_R_AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 19:08:02
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 14:07:55.476651 2025] [security2:error] [pid 11321:tid 11339] [client 216.26.246.20:26849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ainavelas.com"] [uri "/.git/HEAD"] [unique_id "aSihi0R1DKEYXBZn_EoP7AAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:53:35
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:53:22.353997 2025] [security2:error] [pid 12005:tid 12053] [client 216.26.246.20:44595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mecconsultant.com"] [uri "/.env"] [unique_id "aSQdAjBPFl6aUrWWAmc5EQAAAU4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 08:09:55
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:09:47.710635 2025] [security2:error] [pid 15573:tid 15573] [client 216.26.246.20:40231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scrunchiebuttbikini.com"] [uri "/.git/HEAD"] [unique_id "aSQSyxWymQnuMZ-0wpfm1gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2025-11-24 07:11:33
(7 months ago)
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:14:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.246.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:13:54.663907 2025] [security2:error] [pid 7922:tid 7922] [client 216.26.246.20:17239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rememberingemily.com"] [uri "/.svn/wc.db"] [unique_id "aSP3ooLmS__6Ju2pQV8EiAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack