๐ฉ๐ช
xavier-momain.eu
2026-09-22 10:47:57
(1 day ago)
CrowdSec ban โ scenario: tcp:scan | report #2
Port Scan
๐ฉ๐ช
ghostwarriors
2026-09-17 15:20:14
(6 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-17 15:18:05
(6 days ago)
62.169.135.106 - - [17/Sep/2026:17:18:00 +0200] "GET /wp-includes/woocommerce-call.php HTTP/2.0" 404 ...
show more
62.169.135.106 - - [17/Sep/2026:17:18:00 +0200] "GET /wp-includes/woocommerce-call.php HTTP/2.0" 404 361 "http://[site]/wp-includes/woocommerce-call.php" "Go-http-client/2.0"
62.169.135.106 - - [17/Sep/2026:17:18:00 +0200] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 404 293 "http://[site]/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php" "Go-http-client/2.0"
62.169.135.106 - - [17/Sep/2026:17:18:01 +0200] "GET /wp-content/themes/news-portal/error.php HTTP/2.0" 404 316 "http://[site]/wp-content/themes/news-portal/error.php" "Go-http-client/2.0"
62.169.135.106 - - [17/Sep/2026:17:18:02 +0200] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/2.0" 404 316 "http://[site]/wp-content/themes/fukasawa/inc/classes/403.php" "Go-http-client/2.0"
show less
Web App Attack
Hacking
๐ฎ๐ฉ
xveil
2026-09-16 19:37:39
(6 days ago)
2026-09-17T02:37:36.946042 mail-honeypot postfix/submission/smtpd[30991]: warning: unknown[62.169.13 ...
show more
2026-09-17T02:37:36.946042 mail-honeypot postfix/submission/smtpd[30991]: warning: unknown[62.169.135.106]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐ฎ๐ฉ
xveil
2026-09-16 16:52:15
(1 week ago)
2026-09-16T23:52:12.800652 mail-honeypot postfix/submission/smtpd[9215]: warning: unknown[62.169.135 ...
show more
2026-09-16T23:52:12.800652 mail-honeypot postfix/submission/smtpd[9215]: warning: unknown[62.169.135.106]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐บ๐ธ
mnogoweb
2026-09-16 16:49:52
(1 week ago)
(smtpauth) Failed SMTP AUTH login from 62.169.135.106 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 62.169.135.106 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-16 10:49:28 plain authenticator failed for ([192.168.1.68]) [62.169.135.106]: 535 Incorrect authentication data ([email protected] )
2026-09-16 10:49:29 login authenticator failed for ([192.168.1.68]) [62.169.135.106]: 535 Incorrect authentication data ([email protected] )
2026-09-16 10:49:40 plain authenticator failed for ([192.168.1.68]) [62.169.135.106]: 535 Incorrect authentication data ([email protected] )
2026-09-16 10:49:40 login authenticator failed for ([192.168.1.68]) [62.169.135.106]: 535 Incorrect authentication data ([email protected] )
2026-09-16 10:49:51 plain authenticator failed for ([192.168.1.68]) [62.169.135.106]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
๐ฎ๐ฉ
xveil
2026-09-16 15:53:50
(1 week ago)
2026-09-16T22:53:48.405200 mail-honeypot postfix/submission/smtpd[8932]: warning: unknown[62.169.135 ...
show more
2026-09-16T22:53:48.405200 mail-honeypot postfix/submission/smtpd[8932]: warning: unknown[62.169.135.106]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐ฉ๐ช
xavier-momain.eu
2026-09-14 13:35:34
(1 week ago)
CrowdSec ban โ scenario: tcp:scan
Port Scan
๐น๐ท
neron
2026-09-09 10:55:32
(2 weeks ago)
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking
Web App Attack
๐ธ๐ฌ
abuseipreport.darajati
2026-09-08 06:31:52
(2 weeks ago)
62.169.135.106 - - [2026-09-08T14:30:23+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 ...
show more
62.169.135.106 - - [2026-09-08T14:30:23+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/70.0.0.0 Safari/537.36"
62.169.135.106 - - [2026-09-08T14:30:45+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/98.0.0.0 Safari/537.36"
62.169.135.106 - - [2026-09-08T14:31:07+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/87.0.0.0 Safari/537.36"
62.169.135.106 - - [2026-09-08T14:31:28+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/88.0.0.0 Safari/537.36"
62.169.135.106 - - [2026-09-08T14:31:52+08:00] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Edge/89.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-09-03 23:49:22
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan
Web App Attack
Hacking
๐น๐ท
neron
2026-09-02 12:48:46
(3 weeks ago)
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-08-31 05:02:41
(3 weeks ago)
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking
Web App Attack
๐ญ๐ฐ
Anonymous
2026-08-24 07:11:19
(4 weeks ago)
2026-08-24 07:11:19 warning[1249713]: host unknown[62.169.135.106]: unauthorized access at ...
show more
2026-08-24 07:11:19 warning[1249713]: host unknown[62.169.135.106]: unauthorized access attempted: tcp/9010
show less
Port Scan
Brute-Force
๐บ๐ธ
xmission.com
2026-08-23 23:11:24
(4 weeks ago)
Blocked by UFW (TCP on 52363)
Source port: 52416
TTL: 51
Packet length: 60
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 52363)
Source port: 52416
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 62.169.135.106) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan