🇺🇸
1gz
2026-10-06 03:57:28
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Android 10; Mobile; rv:140.0) Gecko/140.0 Firefox/140.0
This report was generated by:
https://github.com/s ...
show more
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /script.js
UA: Mozilla/5.0 (Android 10; Mobile; rv:140.0) Gecko/140.0 Firefox/140.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
MacLotsen
2026-08-02 19:09:54
UTC ·
(3 months ago)
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mob ...
show more
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap
...
show less
Web App Attack
Brute-Force
🇺🇸
xmission.com
2026-07-28 22:47:28
UTC ·
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 33018
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-07-21 15:05:09
UTC ·
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 42384
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-07-18 03:49:36
UTC ·
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 19076
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
xmission.com
2026-07-13 00:28:44
UTC ·
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 57878
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇪🇸
gnom4ik
2026-07-12 12:15:02
UTC ·
(3 months ago)
ban-reviewer auto report; ip=2a0b:f4c2::14; scenario=http:scan; scenario_context=http:scan,tor-exit-nodes; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_ ...
show more
ban-reviewer auto report; ip=2a0b:f4c2::14; scenario=http:scan; scenario_context=http:scan,tor-exit-nodes; verdict=valid_ban; confidence=0.92; categories=14,15,18,22; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=ip_decision_count_high
show less
Port Scan
Hacking
Brute-Force
SSH
🇺🇸
xmission.com
2026-06-26 05:29:38
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 36048
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-06-21 09:11:18
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:11:11.256903 2026] [security2:error] [pid 19391:tid 19391] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 05:11:11.256903 2026] [security2:error] [pid 19391:tid 19391] [client 2a0b:f4c2::14:1896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.medics-group.com"] [uri "/.git/config"] [unique_id "ajeqr4M6oDZVY92ALHne8AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 06:25:08
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:25:03.803629 2026] [security2:error] [pid 22790:tid 22790] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:25:03.803629 2026] [security2:error] [pid 22790:tid 22790] [client 2a0b:f4c2::14:51478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.atsllc.biz"] [uri "/.git/config"] [unique_id "ajDsPyGpIhajpubUO1spBAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 13:43:34
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 09:43:26.440747 2026] [security2:error] [pid 21939:tid 21939] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 09:43:26.440747 2026] [security2:error] [pid 21939:tid 21939] [client 2a0b:f4c2::14:40266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.railsolutionsmexico.com"] [uri "/.git/config"] [unique_id "ajABftKvjs1k_sznDxSvQQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:01:11
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:01:03.066546 2026] [security2:error] [pid 19765:tid 19765] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:01:03.066546 2026] [security2:error] [pid 19765:tid 19765] [client 2a0b:f4c2::14:53300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.va-designers.com"] [uri "/.git/config"] [unique_id "ai-jL-mbtNpqXiUaxso3IwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-06-14 06:41:46
UTC ·
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 21026
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0014) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-06-06 02:58:09
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 22:58:02.004103 2026] [security2:error] [pid 19980:tid 19980] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 22:58:02.004103 2026] [security2:error] [pid 19980:tid 19980] [client 2a0b:f4c2::14:17488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgas.com.scottwithers.xyz"] [uri "/.git/config"] [unique_id "aiOMujCJSxyYfp-54cwLUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 21:32:20
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:32:13.900052 2026] [security2:error] [pid 21414:tid 21463] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:32:13.900052 2026] [security2:error] [pid 21414:tid 21463] [client 2a0b:f4c2::14:55166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sh2.lol"] [uri "/.git/config"] [unique_id "aiNAXaXNbljRaO-Wd0j_YQAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
