🇳🇱
BellFix
2026-08-26 14:00:20
UTC ·
(2 months ago)
Fail2ban reported 3.145.143.53 for posteio-botblocker
Hacking
Brute-Force
🇳🇱
homeshowdomain.nl
2026-07-27 22:01:17
UTC ·
(3 months ago)
Auto-ban: >3000 req/min op 2026-07-27
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-25 09:44:53
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:44:47.857330 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:44:47.857330 2026] [security2:error] [pid 1491282:tid 1491282] [client 3.145.143.53:45918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.unwaved.com"] [uri "/.git/config"] [unique_id "amSFj9IwlOVgf-D8NuXergAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigscoots.com
2026-07-25 06:54:33
UTC ·
(3 months ago)
(PERMBLOCK) 3.145.143.53 (US/United States/ec2-3-145-143-53.us-east-2.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
Brute-Force
SSH
🇿🇦
conure.sh
2026-07-24 20:21:32
UTC ·
(3 months ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
Anonymous
2026-07-24 18:26:37
UTC ·
(3 months ago)
(caddyscan) Scanner path probe from 3.145.143.53 (US/United States/ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2 ...
show more
(caddyscan) Scanner path probe from 3.145.143.53 (US/United States/ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2026:18:26:32 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2026:18:26:32 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2026:18:26:32 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2026:18:26:32 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 3.145.143.53 - - [24/Jul/2026:18:26:32 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-07-24 12:44:40
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:44:34.092868 2026] [security2:error] [pid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 08:44:34.092868 2026] [security2:error] [pid 979739:tid 979768] [client 3.145.143.53:41068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.megawattscorp.net"] [uri "/.git/config"] [unique_id "amNeMpsw41rsOlJQFWRrRQAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 10:14:24
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:14:17.092216 2026] [security2:error] [pid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 06:14:17.092216 2026] [security2:error] [pid 899119:tid 899119] [client 3.145.143.53:37082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mcbrude.com"] [uri "/.git/config"] [unique_id "amM6-aSGuFbi9SDiJqpHywAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 09:48:55
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:48:48.797257 2026] [security2:error] [pid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:48:48.797257 2026] [security2:error] [pid 3376205:tid 3376205] [client 3.145.143.53:49234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mazzaro.com.tr"] [uri "/.git/config"] [unique_id "amM1AI0VceEXxaWjofuJ2QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-07-24 09:13:15
UTC ·
(3 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-07-24 05:33:04
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 3.145.143.53 (US/United States/ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-07-24 04:23:33
UTC ·
(3 months ago)
(modsecurity) srv201 ModSecurity 3.145.143.53 (US/United States/ec2-3-145-143-53.us-east-2.compute.amazonaws.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
chronos
2026-06-01 06:36:36
UTC ·
(5 months ago)
[AUTORAVALT][[01/06/2026 - 03:36:36 -03:00 UTC]
Attack from [Amazon Technologies Inc.]
[3.145.143.53][ec2-3-145-143-53.us-east-2.compute.amazonaws.com]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, in ...
show more
[AUTORAVALT][[01/06/2026 - 03:36:36 -03:00 UTC]
Attack from [Amazon Technologies Inc.]
[3.145.143.53][ec2-3-145-143-53.us-east-2.compute.amazonaws.com]
Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email]
...
show less
Brute-Force
Email Spam
Spoofing
Phishing
Hacking
🇩🇪
excill
2026-05-31 03:02:02
UTC ·
(5 months ago)
Honeypot mesh observed 3249 attack events in 24h — cowrie/dionaea/heralding/suricata
Port Scan
Hacking
Brute-Force
SSH
🇹🇷
Threat.live
2026-05-30 07:30:04
UTC ·
(5 months ago)
Suspicious Connection Attempts
Brute-Force