๐จ๐ฟ
vitex
2026-05-26 04:00:00
(2 weeks ago)
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ...
show more
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour.
show less
DDoS Attack
Bad Web Bot
Anonymous
2026-05-17 10:02:58
(4 weeks ago)
external scanner
Port Scan
Anonymous
2026-04-21 20:51:29
(1 month ago)
IMAP/SMTP brute-force โ Detected by CRMON security monitor.
Brute-Force
๐ฎ๐น
Progetto1
2026-04-02 12:27:03
(2 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
๐ง๐ท
SvrAdmin
2025-12-31 04:33:14
(5 months ago)
[101] (smtpauth) Failed SMTP AUTH login from 37.46.113.146 (LU/Luxembourg/lux-net-ip.as51430.net): 5 ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 37.46.113.146 (LU/Luxembourg/lux-net-ip.as51430.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-12-31 01:31:35 dovecot_login authenticator failed for (ADMIN) [37.46.113.146]:56384: 535 Incorrect authentication data ([email protected] )
2025-12-31 01:31:40 dovecot_login authenticator failed for (ADMIN) [37.46.113.146]:48479: 535 Incorrect authentication data ([email protected] )
2025-12-31 01:33:11 dovecot_login authenticator failed for (ADMIN) [37.46.113.146]:18101: 535 Incorrect authentication data ([email protected] )
2025-12-31 01:33:11 dovecot_login authenticator failed for (ADMIN) [37.46.113.146]:35381: 535 Incorrect authentication data ([email protected] )
2025-12-31 01:33:11 dovecot_login authenticator failed for (ADMIN) [37.46.113.146]:26017: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐ง๐ช
cmbplf
2025-12-28 20:28:19
(5 months ago)
692 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/ ...
show more
692 requests with user_agent.original Mozilla/5.0 (Linux; Android 13; SAMSUNG SM-T220) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/23.0 Chrome/115.0.0.0 Mobile Safari/537.36
684 requests with user_agent.original Mozilla/5.0 (Linux; Android 11; SM-A115M Build/RP1A.200720.012; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/102.0.5005.125 Mobile Safari/537.36 Instagram 306.0.0.35.109 Android (30/11; 280dpi; 720x1411; samsung; SM-A115M; a11q; qcom; pt_BR; 530130405)
681 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/99.0.4844.88 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/436.0.0.35.101;]
662 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2
660 requests with user_agent.original AppleCoreMedia/1.0.0.23A344 (Macintosh; U; Intel Mac OS X 14_0; da_dk)
657 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64; S
show less
Brute-Force
Bad Web Bot
๐ฎ๐น
Progetto1
2025-12-17 21:55:02
(5 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
Anonymous
2025-12-01 10:09:12
(6 months ago)
Web Server atack
...
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2025-11-22 21:33:06
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ธ๐ช
triplecode
2025-11-12 23:26:26
(7 months ago)
Reported from hMailServer
Hacking
๐ฉ๐ช
grassau.com
2025-11-12 21:49:02
(7 months ago)
(smtpauth) Failed SMTP AUTH login from 37.46.113.146 (LU/Luxembourg/lux-net-ip.as51430.net)
Brute-Force
๐ฎ๐น
VHosting
2025-11-12 20:14:37
(7 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force