🇨🇭
Origon
2026-06-15 10:25:00
(4 weeks ago)
NOQUEUE - IP: 212.47.135.30 - Jun 15 12:25:00 plesk postfix/smtpd[1600712]: NOQUEUE: reject: RCPT f ...
show more
NOQUEUE - IP: 212.47.135.30 - Jun 15 12:25:00 plesk postfix/smtpd[1600712]: NOQUEUE: reject: RCPT from unknown[212.47.135.30]: 554 5.7.1 Service unavailable; Client host [212.47.135.30] blocked using dnsbl-2.uceprotect.net; Net 212.47.132.0/22 is UCEPROTECT-Level2 listed because 16 impacts are seen from AZT-AS, AZ/AS8814 there. See: http://www.uceprotect.net/rblcheck.php?ipr=212.47.135.30; from=<[email protected] > to=<REDACTED@REDACTED> proto=ESMTP helo=<[212.47.135.30]>
show less
Email Spam
🇫🇷
dynamix
2026-04-13 21:08:14
(3 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 20:54:31
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 212.47.135.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 212.47.135.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 16:54:26.743909 2026] [security2:error] [pid 2186173:tid 2186173] [client 212.47.135.30:8819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 212.47.135.30 (+1 hits since last alert)|eta-mct.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eta-mct.com"] [uri "/xmlrpc.php"] [unique_id "ad1YAgkxV8mY-KIVaQVwUwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-04-13 16:50:44
(3 months ago)
(wordpress) Failed wordpress login from 212.47.135.30 (AZ/Azerbaijan/Baku City/Baku/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-04-13 16:32:55
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 212.47.135.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 212.47.135.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 12:32:49.344334 2026] [security2:error] [pid 620726:tid 620726] [client 212.47.135.30:14219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 212.47.135.30 (+1 hits since last alert)|meganmurph.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "meganmurph.com"] [uri "/xmlrpc.php"] [unique_id "ad0asSepuUEn9hsWqowdhAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-03-27 13:04:26
(3 months ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇩🇪
bsoft.de
2026-01-20 14:27:14
(5 months ago)
Blocked because of abusive behavior
DDoS Attack
2026-01-15 13:00:04
(5 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Bad Web Bot
Exploited Host
2025-08-22 14:04:50
(10 months ago)
Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇬🇧
Bytemark
2023-12-07 05:06:19
(2 years ago)
Dec 7 05:06:18 dlcentre3 postfix/smtpd[28633]: NOQUEUE: reject: RCPT from unknown[212.47.135.30]: 5 ...
show more
Dec 7 05:06:18 dlcentre3 postfix/smtpd[28633]: NOQUEUE: reject: RCPT from unknown[212.47.135.30]: 554 5.7.1 Service unavailable; Client host [212.47.135.30] blocked using cbl.abuseat.org; https://www.spamhaus.org/query/ip/212.47.135.30; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[212.47.135.30]>
show less
Email Spam
Spoofing
Brute-Force
Exploited Host