2026-04-12 05:42:24
(1 month ago)
Attempt to scan vulnerabilities
Hacking
🇦🇺
RedBear IT
2026-03-26 10:00:37
(2 months ago)
"DDoS against public endpoint"
DDoS Attack
🇮🇹
VHosting
2025-12-23 13:45:16
(5 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇧🇪
madeit
2025-11-30 04:32:56
(6 months ago)
Web App Attack
2025-11-29 13:53:47
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-25 04:25:40
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:25:33.814136 2025] [security2:error] [pid 12732:tid 12732] [client 45.3.39.115:51443] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gangnagel.com"] [uri "/.git/HEAD"] [unique_id "aSUvvXwUPHqy3IOQeycz0wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:39:16
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:39:11.820036 2025] [security2:error] [pid 23710:tid 23710] [client 45.3.39.115:47989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.vankesselporsche.com"] [uri "/.git/HEAD"] [unique_id "aSUk37lHlpginOH2ccxSVAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 02:27:29
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:27:18.559517 2025] [security2:error] [pid 16372:tid 16372] [client 45.3.39.115:14473] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.ccureiti.com"] [uri "/.env"] [unique_id "aSUUBhdTzdPMguaBELEn3QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2025-11-25 01:37:34
(6 months ago)
GET [.git/HEAD]
Port Scan
🇺🇸
TPI-Abuse
2025-11-25 01:06:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 20:06:48.697362 2025] [security2:error] [pid 4370:tid 4370] [client 45.3.39.115:56841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sidkha.com"] [uri "/.git/HEAD"] [unique_id "aSUBKHxTNGyPolyt_eW8-AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 00:45:15
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:45:11.206897 2025] [security2:error] [pid 23751:tid 23751] [client 45.3.39.115:33951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.communitycontrol.com"] [uri "/.git/HEAD"] [unique_id "aST8F5b8txUuYUZNhvSDPgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 23:12:55
(6 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇩🇪
cloudmax
2025-10-27 01:38:52
(7 months ago)
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show more
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
Port Scan
🇩🇪
ps-center
2025-10-26 14:19:57
(7 months ago)
C1-W: TCP-Scanner. Port: 22
Port Scan
🇺🇸
shaunc
2025-10-22 19:47:54
(7 months ago)
Oct 22 14:47:37 mailman sshd[19154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show more
Oct 22 14:47:37 mailman sshd[19154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.3.39.115
Oct 22 14:47:40 mailman sshd[19154]: Failed password for invalid user purpleshell@[redacted] from 45.3.39.115 port 40847 ssh2
Oct 22 14:47:40 mailman sshd[19154]: Connection closed by 45.3.39.115 port 40847 [preauth]
show less
Brute-Force
SSH