2026-07-25 17:22:03
(2 days ago)
Port Scan
Port Scan
🇬🇧
Andrew
2026-07-25 15:40:03
(2 days ago)
Blocked by UFW (TCP on port 2095).
Source port: 5056
TTL: 102
Packet length: 40
TOS: 0x00
This repo ...
show more
Blocked by UFW (TCP on port 2095).
Source port: 5056
TTL: 102
Packet length: 40
TOS: 0x00
This report (for 68.220.62.243) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
MPL
2026-07-25 15:02:29
(2 days ago)
tcp port scan (10 or more attempts)
Port Scan
2026-07-25 12:08:34
(2 days ago)
denied traffic to a honeypot network. destination port 2078.
Port Scan
Hacking
🇩🇪
www.fransveldman.world
2026-07-14 11:28:02
(1 week ago)
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
Bad Web Bot
🇯🇵
SentinalX by uzumaru
2026-06-22 03:33:19
(1 month ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443
show less
Open Proxy
Port Scan
2026-05-21 14:06:32
(2 months ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=21
Hacking
🇺🇸
TPI-Abuse
2026-05-21 14:03:37
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 10:03:31.365563 2026] [security2:error] [pid 11569:tid 11569] [client 68.220.62.243:64406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "renperfco.com"] [uri "/.env"] [unique_id "ag8QswEebDx-jgE69z49lwAAAA0"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 13:22:24
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 09:22:19.287214 2026] [security2:error] [pid 6949:tid 6949] [client 68.220.62.243:64485] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paardekooper.info"] [uri "/.env"] [unique_id "ag8HC5JFZUjsPrfh9wS0bAAAABQ"], referer: https://twitter.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 10:48:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 06:48:33.351734 2026] [security2:error] [pid 5514:tid 5514] [client 68.220.62.243:62827] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leonardodecaprio.com"] [uri "/.env"] [unique_id "ag7jAR9uh1ysA02Mg-u5OAAAAAk"], referer: https://www.notion.so/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-05-21 09:10:03
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-04-21 09:31:39
(3 months ago)
160 requests with url.path */.git/config
Brute-Force
Bad Web Bot
2026-04-21 08:45:02
(3 months ago)
suspicious request in access.log
Web App Attack
🇫🇷
ELYAZ
2026-04-21 07:17:39
(3 months ago)
(y3) Failed access -byebye- from 68.220.62.243 (US/United States/-): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-04-10 19:43:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 68.220.62.243 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 15:43:48.711672 2026] [security2:error] [pid 2092639:tid 2092639] [client 68.220.62.243:3201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dev.handyrehab.com"] [uri "/@fs/.git/config"] [unique_id "adlS9MNMhKfvGP1SNe_4VgAAAAg"], referer: https://www.linkedin.com/
show less
Brute-Force
Bad Web Bot
Web App Attack