🇫🇷
vtchost.com
2026-10-12 14:30:40
UTC ·
(4 weeks ago)
requested HTTP honeypot page - ignored robots.txt - bad crawler
...
Bad Web Bot
Exploited Host
🇩🇪
nyuuzyou
2026-09-14 05:28:54
UTC ·
(1 month ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-14T05:28:54Z.
Bad Web Bot
🇺🇸
xmission.com
2026-08-28 05:23:09
UTC ·
(2 months ago)
Blocked by UFW (TCP on 9999)
Source port: 38184
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Ping of Death
🇨🇭
Peter-Johann Sarbach
2026-08-14 06:24:08
UTC ·
(2 months ago)
Aug 13 10:47:07 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 0 secs): user=<>, rip=2001:67c:289c::20, lip=x.x.x.x, TLS handshaking: SSL_accep ...
show more
Aug 13 10:47:07 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 0 secs): user=<>, rip=2001:67c:289c::20, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-06 08:33:30
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:33:18.352577 2026] [security2:error] [pid 3382:tid 3382] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:33:18.352577 2026] [security2:error] [pid 3382:tid 3382] [client 2001:67c:289c::20:14166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.laura-stone.com"] [uri "/.git/config"] [unique_id "aktoTvidcTAIEvFsPk-uGQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-06-29 06:39:08
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 39726
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-06-24 16:27:09
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 63184
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-06-23 17:38:56
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:38:51.242800 2026] [security2:error] [pid 22458:tid 22458] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:38:51.242800 2026] [security2:error] [pid 22458:tid 22458] [client 2001:67c:289c::20:29174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.gdijoe.com"] [uri "/.git/config"] [unique_id "ajrEq8bfuKVXGSHshvWa-QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 14:12:03
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:11:58.194733 2026] [security2:error] [pid 22838:tid 22838] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:11:58.194733 2026] [security2:error] [pid 22838:tid 22838] [client 2001:67c:289c::20:29138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.iiiip.org"] [uri "/.git/config"] [unique_id "ajAILp80JZF4nuKccx1w9gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:33:01
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:32:53.403931 2026] [security2:error] [pid 13912:tid 13912] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:32:53.403931 2026] [security2:error] [pid 13912:tid 13912] [client 2001:67c:289c::20:16074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.nowell.net"] [uri "/.git/config"] [unique_id "ai-4tZc5CEKE1f7NFKzSmgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 03:19:44
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:19:30.995121 2026] [security2:error] [pid 31008:tid 31008] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:19:30.995121 2026] [security2:error] [pid 31008:tid 31008] [client 2001:67c:289c::20:14554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pnwdso.org"] [uri "/.git/config"] [unique_id "ait6wpF6TEs0ilN69JQvAwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-06-10 13:43:09
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 43480
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-06-06 05:50:07
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 53586
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-06-05 11:57:09
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:57:04.324384 2026] [security2:error] [pid 13890:tid 13897] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:289c::20 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:57:04.324384 2026] [security2:error] [pid 13890:tid 13897] [client 2001:67c:289c::20:22562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pennassociatenotary.com"] [uri "/.git/config"] [unique_id "aiK5kEAsqru4VUPh0zeKhgAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-05-28 17:42:00
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 63226
Packet length: 80
This report (for 2001:067c:289c:0000:0000:0000:0000:0020) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
