🇺🇸
xmission.com
2026-11-10 17:58:40
UTC ·
(4 days ago)
Blocked by UFW (TCP on 53013)
Source port: 8822
TTL: 47
Packet length: 60
TOS: 0x00
This report (for 46.29.25.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-09-20 06:53:34
UTC ·
(1 month ago)
Blocked by UFW (TCP on 51413)
Source port: 10022
TTL: 48
Packet length: 60
TOS: 0x00
This report (for 46.29.25.109) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇷🇴
DamonOne
2026-09-09 08:16:50
UTC ·
(2 months ago)
Blocked by OPNsense; 30 hits, proto=tcp,udp, ports=8510
Port Scan
Hacking
🇨🇳
鹏鹏
2026-06-14 22:30:46
UTC ·
(5 months ago)
monitor: on VM-0-7-ubuntu | port: 48690 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
2026-03-07 03:50:18
UTC ·
(8 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇺🇸
TPI-Abuse
2026-01-27 05:59:53
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 00:59:47.421119 2026] [security2:error] [pid 2402:tid 2424] [client 46.29.25.109:6496] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 00:59:47.421119 2026] [security2:error] [pid 2402:tid 2424] [client 46.29.25.109:6496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daraluz.net"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXhUUyDkToVlyWyiRuMVwgAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-01-27 05:25:52
UTC ·
(9 months ago)
(mod_security) mod_security triggered on hostname [redacted] 46.29.25.109 (NL/The Netherlands/-)
SQL Injection
🇺🇸
agenciahypelab.com.br
2026-01-27 01:50:50
UTC ·
(9 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
Anonymous
2026-01-27 01:32:03
UTC ·
(9 months ago)
Bot / scanning and/or hacking attempts: GET /wp-config.php_old2011 HTTP/1.1, GET /wp-config.php.csproj HTTP/1.1, GET /wp-config.php_old2008 HTTP/1.1, GET /wp-config.php.log HTTP/1.1, GET /wp-config.php_old2014 HTTP/1.1, GET /wp-config.php_old2006 HTT ...
show more
Bot / scanning and/or hacking attempts: GET /wp-config.php_old2011 HTTP/1.1, GET /wp-config.php.csproj HTTP/1.1, GET /wp-config.php_old2008 HTTP/1.1, GET /wp-config.php.log HTTP/1.1, GET /wp-config.php_old2014 HTTP/1.1, GET /wp-config.php_old2006 HTTP/1.1, GET /wp-config.php.vi HTTP/1.1, GET /wp-config.php.rej HTTP/1.1, GET /wp-config.php_old2005 HTTP/1.1, GET /wp-config.php_old2013 HTTP/1.1, GET /wp-config.php_old2004 HTTP/1.1, GET /wp-config.php_old2016 HTTP/1.1, GET /wp-config.php_old2007 HTTP/1.1, GET /wp-config.php_old2009 HTTP/1.1, GET /wp-config.php.vbproj HTTP/1.1, GET /wp-config.php_old2015 HTTP/1.1, GET /wp-config.php_old2010 HTTP/1.1, GET /wp-config.php_old2012 HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-01-27 01:29:41
UTC ·
(9 months ago)
Excessive multi-domain requests
Brute-Force
🇲🇾
Rizzy
2026-01-27 00:30:51
UTC ·
(9 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 23:06:41
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 18:06:37.555000 2026] [security2:error] [pid 19871:tid 19871] [client 46.29.25.109:1176] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 18:06:37.555000 2026] [security2:error] [pid 19871:tid 19871] [client 46.29.25.109:1176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.expertprofessionalcleaners.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXfzfdBDM7OhPy0I14q0VgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-01-26 21:59:22
UTC ·
(9 months ago)
suspicious behavior
Blog Spam
Brute-Force
Web App Attack
🇫🇮
YF
2026-01-26 21:00:18
UTC ·
(9 months ago)
404 errors (Vulnerability scan)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 17:30:08
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:30:03.694189 2026] [security2:error] [pid 12683:tid 12683] [client 46.29.25.109:59768] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 46.29.25.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:30:03.694189 2026] [security2:error] [pid 12683:tid 12683] [client 46.29.25.109:59768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "futurbike.it"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aXekm_YFndk3VfzPN32JnQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack