🇮🇹
VHosting
2026-10-17 11:18:52
UTC ·
(3 weeks ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
xmission.com
2026-09-05 05:53:17
UTC ·
(2 months ago)
Blocked by UFW (TCP on 41284)
Source port: 443
Packet length: 2287
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-08-09 08:58:09
UTC ·
(3 months ago)
Blocked by UFW (TCP on 49546)
Source port: 443
Packet length: 108
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱
WeCloudit-Anti-Abuse
2026-07-16 14:28:27
UTC ·
(3 months ago)
HTTP flood against /retreat-corp on Apache webserver
Brute-Force
🇺🇸
xmission.com
2026-07-01 08:52:29
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 14991
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-06-01 15:31:42
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 16807
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇭
Peter-Johann Sarbach
2026-05-13 05:23:32
UTC ·
(5 months ago)
May 12 03:49:31 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 0 secs): user=<>, rip=2a0b:f4c2:4::108, lip=x.x.x.x, TLS handshaking: SSL_accept ...
show more
May 12 03:49:31 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm (no auth attempts in 0 secs): user=<>, rip=2a0b:f4c2:4::108, lip=x.x.x.x, TLS handshaking: SSL_accept() failed: error:0A000076:SSL routines::no suitable signature algorithm
show less
Hacking
🇺🇸
TPI-Abuse
2026-05-08 09:02:14
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:02:08.009634 2026] [security2:error] [pid 18268:tid 18268] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:02:08.009634 2026] [security2:error] [pid 18268:tid 18268] [client 2a0b:f4c2:4::108:38391] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||customhumanrobots.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "customhumanrobots.com"] [uri "/backupdb.sql"] [unique_id "af2mkKsGfJQvhXYtneFqfQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-26 21:05:03
UTC ·
(6 months ago)
2026-04-26 08:01:01,460 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-26 12:01:46,770 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-26 18:01:44,361 fail2ban.actions [7718]: NOTICE [tor ...
show more
2026-04-26 08:01:01,460 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-26 12:01:46,770 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-26 18:01:44,361 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-26 21:01:43,652 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
2026-04-27 00:05:01,241 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2:4::108
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-04-17 02:34:39
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 22:34:32.105390 2026] [security2:error] [pid 3847538:tid 3847538] [client 2a0b:f4c2 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 22:34:32.105390 2026] [security2:error] [pid 3847538:tid 3847538] [client 2a0b:f4c2:4::108:29389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rambleandprose.com"] [uri "/wp-config.php.sample"] [unique_id "aeGcOP2CJIOjGLXr5np32QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-04-04 02:07:31
UTC ·
(7 months ago)
Blocked by UFW (TCP on 8333)
Source port: 45303
Packet length: 72
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-04-02 05:08:02
UTC ·
(7 months ago)
Blocked by UFW (TCP on 57078)
Source port: 993
Packet length: 108
This report (for 2a0b:f4c2:0004:0000:0000:0000:0000:0108) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇹
VHosting
2026-03-26 20:21:59
UTC ·
(7 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-24 05:39:24
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 00:39:18.661130 2026] [security2:error] [pid 26108:tid 26108] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 00:39:18.661130 2026] [security2:error] [pid 26108:tid 26108] [client 2a0b:f4c2:4::108:38941] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||haroparke.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "haroparke.com"] [uri "/wp_admin.sql"] [unique_id "aZ05hmiwbFiqiV06YEDUZQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 07:14:39
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 02:14:33.594172 2026] [security2:error] [pid 24076:tid 24076] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 02:14:33.594172 2026] [security2:error] [pid 24076:tid 24076] [client 2a0b:f4c2:4::108:41127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.globalsecurity360.com"] [uri "/.git/config"] [unique_id "aZv-WbW1__B3IutM_5x_VwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack