🇩🇪
xavier-momain.eu
2026-10-01 15:49:58
UTC ·
(1 month ago)
CrowdSec ban — scenario: ssh:bruteforce
Brute-Force
SSH
🇹🇷
neron
2026-09-30 20:06:38
UTC ·
(1 month ago)
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-09-27 21:51:38
UTC ·
(1 month ago)
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking
Web App Attack
🇽🇰
Hobby Bob
2026-09-27 16:36:16
UTC ·
(1 month ago)
MikroTrick exploit
Brute-Force
2026-09-13 03:32:00
UTC ·
(2 months ago)
apache vulnerability scan
Web App Attack
🇫🇮
mnazibo
2026-09-12 18:45:46
UTC ·
(2 months ago)
Date: Sep 12 20:49:34 2026 EAT | Reported IP: 178.62.124.12 mod_security | id: 920350 | GB/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Host header is a numeric IP address
SQL Injection
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-09-12 16:40:39
UTC ·
(2 months ago)
*Port Scan* detected from 178.62.124.12 (GB/United Kingdom/-). 11 hits in the last 273 seconds (0-193)
Port Scan
🇫🇷
masterguru
2026-09-12 12:57:43
UTC ·
(2 months ago)
*Port Scan* detected from 178.62.124.12 (GB/United Kingdom/-). 11 hits in the last 248 seconds (0-193)
Port Scan
🇩🇪
hbrks
2026-09-12 09:37:16
UTC ·
(2 months ago)
5 attack(s) detected, such as these: {"event":"web_block","ip":"178.62.124.12","host":"git.marche-be.com","request":"POST /api/v4/projects/13/repository/commits HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-09-12T09:37:16 00:00"," ...
show more
5 attack(s) detected, such as these: {"event":"web_block","ip":"178.62.124.12","host":"git.marche-be.com","request":"POST /api/v4/projects/13/repository/commits HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-09-12T09:37:16 00:00","logentry":"git.marche-be.com 178.62.124.12 - - [12/Sep/2026:11:37:16 0200] \"POST /api/v4/projects/13/repository/commits HTTP/1.1\" 404 35 \"-\" \"-\" \"172.25.79.6:80\""} * Report Details *: https://p4u.xyz/SEKITZXTAP1/1* IP Details *: https://p4u.xyz/SEKITZXTAP1/2
show less
Web Spam
Hacking
Bad Web Bot
🇺🇸
AS200819
2026-09-11 18:36:04
UTC ·
(2 months ago)
2026-09-11T14:57:07.009448-03:00 bravo pvedaemon[827270]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=user 'root@pam' is disabled
2026-09-11T14:57:07.217203-03:00 bravo pvedaemon[827269]: authentication failure; rhost=::ffff: ...
show more
2026-09-11T14:57:07.009448-03:00 bravo pvedaemon[827270]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=user 'root@pam' is disabled
2026-09-11T14:57:07.217203-03:00 bravo pvedaemon[827269]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=user 'root@pam' is disabled
2026-09-11T15:36:03.442408-03:00 bravo pvedaemon[827271]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=user 'root@pam' is disabled
...
show less
Brute-Force
2026-09-11 18:12:49
UTC ·
(2 months ago)
2026-09-11T18:11:43.588694+02:00 srv1 pvedaemon[1022662]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
2026-09-11T18:18:40.420020+02:00 srv1 pvedaemon[1022663]: authentication failure ...
show more
2026-09-11T18:11:43.588694+02:00 srv1 pvedaemon[1022662]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
2026-09-11T18:18:40.420020+02:00 srv1 pvedaemon[1022663]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
2026-09-11T18:55:16.961211+02:00 srv1 pvedaemon[1022663]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
2026-09-11T19:51:27.045618+02:00 srv1 pvedaemon[1022663]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
2026-09-11T20:12:48.857728+02:00 srv1 pvedaemon[1022663]: authentication failure; rhost=::ffff:178.62.124.12 user=root@pam msg=401 permission denied - invalid PVE ticket
...
show less
Brute-Force
Web App Attack
🇺🇸
cwytech
2026-09-11 14:01:50
UTC ·
(2 months ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
2026-09-11 08:59:14
UTC ·
(2 months ago)
Firewall trigger on MikroTik RB4011
Port Scan
🇩🇪
LRob
2026-09-10 17:50:48
UTC ·
(2 months ago)
Enumerating paths that do not exist (scanning) | method: GET | path: /web/assets/fontawesome/css/SdT8H.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_0 rv:6.0; fa-IR) AppleWebKit/535.21.3 (KHTML, like Gecko) Version/4.1 Safari/535.21 | 2026-0 ...
show more
Enumerating paths that do not exist (scanning) | method: GET | path: /web/assets/fontawesome/css/SdT8H.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_0 rv:6.0; fa-IR) AppleWebKit/535.21.3 (KHTML, like Gecko) Version/4.1 Safari/535.21 | 2026-09-10 17:50 UTC
show less
Port Scan
Web App Attack
🇺🇸
xxkodedxx
2026-09-10 02:17:00
UTC ·
(2 months ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: GB / AS14061 DigitalOcean, LLC
Active: 02:16:26 UTC
Volume: 1 HTTP req
Probed: /
Status mix: 444×1
Vhost fishing: 67.217.240.72
Auto ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1× edge-block in 10m window.
Origin: GB / AS14061 DigitalOcean, LLC
Active: 02:16:26 UTC
Volume: 1 HTTP req
Probed: /
Status mix: 444×1
Vhost fishing: 67.217.240.72
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
