🇱🇻
radix
2026-10-31 00:06:58
UTC ·
(1 week ago)
Web application exploit / backdoor attempt detected.
Hacking
Brute-Force
🇹🇷
neron
2026-08-15 05:06:48
UTC ·
(2 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-11 11:06:49
UTC ·
(2 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-07 05:37:17
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇳🇱
MacLotsen
2026-08-02 19:10:05
UTC ·
(3 months ago)
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mob ...
show more
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap
...
show less
Web App Attack
Brute-Force
🇺🇸
xmission.com
2026-07-14 08:07:35
UTC ·
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 24268
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪
Savvii
2026-06-10 09:44:51
UTC ·
(5 months ago)
20 attempts against mh-misbehave-ban on web-new
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-05-27 18:45:32
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 18892
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-05-14 11:37:30
UTC ·
(5 months ago)
Blocked by UFW (TCP on 8333)
Source port: 54642
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-04-30 10:44:29
UTC ·
(6 months ago)
Blocked by UFW (TCP on 37126)
Source port: 9004
Packet length: 120
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-04-26 21:59:20
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 17:59:14.518161 2026] [security2:error] [pid 22953:tid 22953] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 17:59:14.518161 2026] [security2:error] [pid 22953:tid 22953] [client 2a0b:f4c2::13:53062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theseventhcongregationofladderdayvixens.org"] [uri "/wp-config.php.backup"] [unique_id "ae6KsoOxhooTEJvDMo27DAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-04-26 21:04:33
UTC ·
(6 months ago)
2026-04-26 08:00:54,093 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-26 12:01:41,929 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-26 18:01:39,594 fail2ban.actions [7718]: NOTICE [tor] Ban ...
show more
2026-04-26 08:00:54,093 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-26 12:01:41,929 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-26 18:01:39,594 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-26 21:01:38,839 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
2026-04-27 00:04:29,061 fail2ban.actions [7718]: NOTICE [tor] Ban 2a0b:f4c2::13
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-04-26 20:02:59
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:02:52.960413 2026] [security2:error] [pid 14332:tid 14332] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 16:02:52.960413 2026] [security2:error] [pid 14332:tid 14332] [client 2a0b:f4c2::13:47028] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||internetnameregistration.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "internetnameregistration.com"] [uri "/weekly.sql"] [unique_id "ae5vbAprV8y25gS7IRUj4QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 20:33:42
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 16:33:36.374215 2026] [security2:error] [pid 8951:tid 8951] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 16:33:36.374215 2026] [security2:error] [pid 8951:tid 8951] [client 2a0b:f4c2::13:44692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayareamustangs.com"] [uri "/wp-config.php~"] [unique_id "ae0lIIB19GGy9HBpPdoruQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-04-21 19:34:46
UTC ·
(6 months ago)
Blocked by UFW (TCP on 8333)
Source port: 63856
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0013) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan