๐ณ๐ฑ
Alt255
2026-11-03 16:11:07
UTC ยท
(4 days ago)
[ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 2a0b:f4c2::21 - - [03/Nov/2026:17:10:18 +0100] "POST /wp-login.php HTTP/1.1" 200 4158 "https://stonerealestate.nl/wp-login.php" "Mozilla ...
show more
[ti-17al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 2a0b:f4c2::21 - - [03/Nov/2026:17:10:18 +0100] "POST /wp-login.php HTTP/1.1" 200 4158 "https://stonerealestate.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
2a0b:f4c2::21 - - [03/Nov/2026:17:10:27 +0100] "POST /wp-login.php HTTP/1.1" 200 4158 "https://stonerealestate.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
2a0b:f4c2::21 - - [03/Nov/2026:17:10:37 +0100] "POST /wp-login.php HTTP/1.1" 200 4158 "https://stonerealestate.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safa
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-10-25 17:06:37
UTC ยท
(1 week ago)
Not following 301 redirects โ wasted requests | host: amelieredouin.fr | method: GET | path: /contact/ | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | src_port: 39530 | 2026-10-25 17:06 UT ...
show more
Not following 301 redirects โ wasted requests | host: amelieredouin.fr | method: GET | path: /contact/ | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | src_port: 39530 | 2026-10-25 17:06 UTC
show less
Bad Web Bot
๐บ๐ธ
xmission.com
2026-09-02 16:09:22
UTC ยท
(2 months ago)
Blocked by UFW (TCP on 8333)
Source port: 23914
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
xmission.com
2026-08-31 07:09:24
UTC ยท
(2 months ago)
Blocked by UFW (TCP on 8333)
Source port: 29824
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐ฎ๐น
VHosting
2026-08-09 14:54:03
UTC ยท
(2 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
๐ณ๐ฑ
MacLotsen
2026-08-02 19:09:41
UTC ยท
(3 months ago)
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mob ...
show more
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap
...
show less
Web App Attack
Brute-Force
๐น๐ท
neron
2026-07-28 22:19:38
UTC ยท
(3 months ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐บ๐ธ
xmission.com
2026-07-26 02:43:17
UTC ยท
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 59198
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
xmission.com
2026-07-20 18:35:47
UTC ยท
(3 months ago)
Blocked by UFW (TCP on 8333)
Source port: 41596
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
xmission.com
2026-07-02 19:40:50
UTC ยท
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 18440
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
xmission.com
2026-06-27 10:15:38
UTC ยท
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 60170
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
TPI-Abuse
2026-06-23 10:09:20
UTC ยท
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:09:12.894844 2026] [security2:error] [pid 30457:tid 30457] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:09:12.894844 2026] [security2:error] [pid 30457:tid 30457] [client 2a0b:f4c2::21:41304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.stkm.com"] [uri "/.git/config"] [unique_id "ajpbSMST8BlbR05LJlTMtgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
xmission.com
2026-06-22 20:59:12
UTC ยท
(4 months ago)
Blocked by UFW (TCP on 8333)
Source port: 57686
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐บ๐ธ
TPI-Abuse
2026-06-12 08:20:17
UTC ยท
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:20:11.094560 2026] [security2:error] [pid 21163:tid 21166] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:20:11.094560 2026] [security2:error] [pid 21163:tid 21166] [client 2a0b:f4c2::21:5342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.triestemagica.org"] [uri "/.git/config"] [unique_id "aivBO24cQwmC8CW0igIgngAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 19:05:18
UTC ยท
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:05:01.983264 2026] [security2:error] [pid 18464:tid 18464] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:05:01.983264 2026] [security2:error] [pid 18464:tid 18464] [client 2a0b:f4c2::21:5876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.maleein.com"] [uri "/.git/config"] [unique_id "aim1XWwBKAZUtdW4qOIRZAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack