🇩🇪
ghostwarriors
2026-11-03 18:50:40
UTC ·
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-03 18:36:54
UTC ·
(1 week ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-10-29 16:35:07
UTC ·
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-29 UTC.
Exploited Host
🇺🇸
xmission.com
2026-09-02 05:19:59
UTC ·
(2 months ago)
Blocked by UFW (TCP on 8333)
Source port: 64476
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-08-20 06:37:06
UTC ·
(2 months ago)
Blocked by UFW (TCP on 8333)
Source port: 55378
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-08-18 12:15:52
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 08:15:42.836765 2026] [security2:error] [pid 17584:tid 17584] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 08:15:42.836765 2026] [security2:error] [pid 17584:tid 17584] [client 2a0b:f4c2::12:56944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.praedari.com.greighhouse.com"] [uri "/.git/config"] [unique_id "aoRM7oL-fWcehPpB61BByQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-09 14:31:00
UTC ·
(3 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇳🇱
MacLotsen
2026-08-02 19:10:01
UTC ·
(3 months ago)
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mob ...
show more
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap
...
show less
Web App Attack
Brute-Force
🇺🇸
xmission.com
2026-06-29 07:52:07
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 15874
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-06-21 05:33:42
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 30488
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-06-15 09:26:50
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:26:43.138084 2026] [security2:error] [pid 27646:tid 27646] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:26:43.138084 2026] [security2:error] [pid 27646:tid 27646] [client 2a0b:f4c2::12:39100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bandpd.com"] [uri "/.git/config"] [unique_id "ai_FU1VZtgQ6a80ApPHRGAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 11:55:46
UTC ·
(4 months ago)
(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:55:38.459837 2026] [security2:error] [pid 14991:tid 14991] ...
show more
(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:55:38.459837 2026] [security2:error] [pid 14991:tid 14991] [client 2a0b:f4c2::12:37444] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ipv6.tapwagon305.com"] [uri "/.git/config"] [unique_id "aivzuuqLqv8Iyr155z1CjQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Savvii
2026-06-10 09:29:50
UTC ·
(5 months ago)
22 attempts against mh-misbehave-ban on web-new
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 11:30:48
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:30:41.564427 2026] [security2:error] [pid 25369:tid 25369] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:30:41.564427 2026] [security2:error] [pid 25369:tid 25369] [client 2a0b:f4c2::12:22710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.icbsmonitor.net"] [uri "/.git/config"] [unique_id "aiKzYVgb2jdD_0R89-83cAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-05-19 00:48:48
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 54606
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan