🇷🇺
Agrohim
2026-05-24 00:25:57
(1 month ago)
Gate Inet blocked for categories:
DDoS Attack
Ping of Death
Port Scan
Hacking
Brute-Force
🇧🇷
SvrAdmin
2026-04-03 05:54:15
(2 months ago)
[101] (smtpauth) Failed SMTP AUTH login from 212.56.54.135 (US/United States/-): 5 in the last 3600 ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 212.56.54.135 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-03 02:53:39 dovecot_plain authenticator failed for H=([10.6.18.240]) [212.56.54.135]:64597: 535 Incorrect authentication data ([email protected] )
2026-04-03 02:53:45 dovecot_login authenticator failed for H=([10.6.18.240]) [212.56.54.135]:64597: 535 Incorrect authentication data ([email protected] )
2026-04-03 02:53:52 dovecot_plain authenticator failed for H=([10.6.18.240]) [212.56.54.135]:36471: 535 Incorrect authentication data ([email protected] )
2026-04-03 02:53:54 dovecot_login authenticator failed for H=([10.6.18.240]) [212.56.54.135]:36471: 535 Incorrect authentication data ([email protected] )
2026-04-03 02:54:09 dovecot_plain authenticator failed for H=([10.6.18.240]) [212.56.54.135]:54528: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇺🇸
xmission.com
2026-03-27 06:42:02
(2 months ago)
Blocked by UFW (TCP on 51593)
Source port: 55778
TTL: 49
Packet length: 60
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 51593)
Source port: 55778
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 212.56.54.135) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
2026-03-09 23:35:06
(3 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-03-06 23:30:17
(3 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-03-03 23:25:07
(3 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-02-28 23:20:17
(3 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-02-23 22:15:06
(4 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-02-22 06:15:01
(4 months ago)
...
Brute-Force
2026-02-20 22:10:09
(4 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2026-02-17 22:05:14
(4 months ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇩🇪
Lino Project
2026-02-09 11:35:32
(4 months ago)
212.56.54.135 - - [09/Feb/2026:12:35:30 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3724 "-" "Mozilla/5.0 ...
show more
212.56.54.135 - - [09/Feb/2026:12:35:30 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
212.56.54.135 - - [09/Feb/2026:12:35:31 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-01 19:30:06
(4 months ago)
HACK
Brute-Force
🇺🇸
TPI-Abuse
2026-02-01 18:58:20
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 212.56.54.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.54.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 13:58:13.760967 2026] [security2:error] [pid 19129:tid 19129] [client 212.56.54.135:9559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||phlippo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "phlippo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX-iRSztRFBe7PYviV5iywAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 16:40:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 212.56.54.135 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.54.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 11:40:27.276884 2026] [security2:error] [pid 12774:tid 12774] [client 212.56.54.135:47100] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||randyshelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "randyshelly.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX-B-wgZ9l2TV7ivXQSETAAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack