🇺🇸
xmission.com
2026-03-21 13:55:08
(3 months ago)
Blocked by UFW (TCP on 1)
Source port: 49171
TTL: 115
Packet length: 52
TOS: 0x0A
This report (for ...
show more
Blocked by UFW (TCP on 1)
Source port: 49171
TTL: 115
Packet length: 52
TOS: 0x0A
This report (for 84.239.12.139) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
int8
2026-03-15 10:40:10
(3 months ago)
2026-03-15T10:40:10.037875854Z Minecraft server scanner: status request
Port Scan
🇩🇪
zUnlegit
2026-03-15 10:37:42
(3 months ago)
2026-03-15 10:37:22: Minecraft server scan detected from 84.239.12.139 on port 25565 of mailserver
Port Scan
🇺🇸
cpxducky
2026-03-15 10:37:11
(3 months ago)
2026-03-15 10:37:11: Minecraft server scan detected from 84.239.12.139 on port 25565 of mail.cpxduck ...
show more
2026-03-15 10:37:11: Minecraft server scan detected from 84.239.12.139 on port 25565 of mail.cpxducky.com
show less
Port Scan
🇺🇸
TPI-Abuse
2026-03-05 22:33:16
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 84.239.12.139 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 84.239.12.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 17:33:09.633364 2026] [security2:error] [pid 19236:tid 19236] [client 84.239.12.139:11388] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||67ronin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "67ronin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaoEpfTegQpdKJoHDAIH9AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-05 21:16:15
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 84.239.12.139 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 84.239.12.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 16:16:07.439313 2026] [security2:error] [pid 2501:tid 2501] [client 84.239.12.139:47046] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thenutritionfixhollysprings.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thenutritionfixhollysprings.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aanyl85RlXXEs9svsbk59QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-05 13:51:45
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-03-03 16:31:24
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇹🇷
rtbh.com.tr
2025-12-26 20:10:40
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
UM3
2025-12-25 11:58:47
(6 months ago)
Exim Auth Failed
Brute-Force
🇨🇿
lp
2025-12-25 11:55:38
(6 months ago)
Email account brute force: 6 attempts were recorded from 84.239.12.139
2025-12-25T12:27:54+01:00 war ...
show more
Email account brute force: 6 attempts were recorded from 84.239.12.139
2025-12-25T12:27:54+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-12-25T12:27:55+01:00 warning: unknown[84.239.12.139]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-12-25T12:27:57+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-12-25T12:27:58+01:00 warning: unknown[84.239.12.139]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-12-25T12:28:18+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-12-25T12:28:18+01:00 warning: unknown[84.239.12.139]: SASL LOGIN authentication failed: authenticat
show less
Brute-Force
🇹🇷
rtbh.com.tr
2025-12-24 20:10:37
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-12-23 20:10:36
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇨🇿
lp
2025-12-23 16:21:45
(6 months ago)
Email account brute force: 5 attempts were recorded from 84.239.12.139
2025-12-23T16:47:14+01:00 war ...
show more
Email account brute force: 5 attempts were recorded from 84.239.12.139
2025-12-23T16:47:14+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-12-23T16:47:14+01:00 warning: unknown[84.239.12.139]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-12-23T16:47:16+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
2025-12-23T16:47:17+01:00 warning: unknown[84.239.12.139]: SASL LOGIN authentication failed: authentication failure, [email protected]
2025-12-23T16:47:26+01:00 warning: unknown[84.239.12.139]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇨🇦
Julio Covolato
2025-12-23 08:30:02
(6 months ago)
Imap or Submission login brute-force attacks.
Brute-Force