This IP address has been reported a total of
42
times from
22 distinct
sources.
65.110.40.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:210492) triggered by 65.110.40.28 (-): 1 in the last 300 secs; Ports ...
show more(mod_security) mod_security (id:210492) triggered by 65.110.40.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 15:48:27.291306 2026] [security2:error] [pid 24291:tid 24291] [client 65.110.40.28:49098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yeejia.net"] [uri "/.env.production.copy"] [unique_id "aj7Xi6sSsNhngw9tP3M3sgAAAFo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / seems abusive / Apache connections: 115
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /credentials.json HTTP/1.1, GET /keyfile.json HTTP/1.1, ...
show moreBot / scanning and/or hacking attempts: GET /credentials.json HTTP/1.1, GET /keyfile.json HTTP/1.1, GET /secrets.json HTTP/1.1, GET /backend/.htpasswd HTTP/1.1, GET /key.json HTTP/1.1, GET /server/master.key HTTP/1.1, GET /laravel/keyfile.json HTTP/1.1, GET /dev/.netrc HTTP/1.1, GET / HTTP/1.1, GET /backend/credentials.json HTTP/1.1, GET /wp-config.php HTTP/1.1
show less
SSH brute-force / unauthorized login attempts observed against sovereign infrastructure.
Hits: 1. Co ...
show moreSSH brute-force / unauthorized login attempts observed against sovereign infrastructure.
Hits: 1. Confidence: 75.
Recent sample:
2026-06-26T02:24:17.082Z:
show less