102 exploit attempts against Gitea CVE-2026-60004 (POST /api/v1/repos/*/diffpatch, arbitrary file wr ...
show more102 exploit attempts against Gitea CVE-2026-60004 (POST /api/v1/repos/*/diffpatch, arbitrary file write via git hook injection); 3 automated account registrations. Observed 2026-08-03 05:59 to 2026-08-07 08:29 UTC on a self-hosted Gitea instance. Goal: deploying an XMRig Monero cryptominer and a remote-control backdoor.
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-08-07T04:44:28Z and 2026-08-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-08-07T04:44:28Z and 2026-08-07T04:44:46Z
show less
SSH Brute force: 3 attempts were recorded from 45.32.28.125
2026-08-06T17:20:28+02:00 Connection clo ...
show moreSSH Brute force: 3 attempts were recorded from 45.32.28.125
2026-08-06T17:20:28+02:00 Connection closed by authenticating user root 45.32.28.125 port 37170 [preauth]
2026-08-06T17:20:30+02:00 Connection closed by authenticating user root 45.32.28.125 port 37178 [preauth]
2026-08-06T17:20:33+02:00 Connection closed by authenticating user root 45.32.28.125 port 37184 [preauth]
show less
Aug 6 17:50:32 excalibur sshd[1435677]: Connection closed by authenticating user root 45.32.28.125 ...
show moreAug 6 17:50:32 excalibur sshd[1435677]: Connection closed by authenticating user root 45.32.28.125 port 38398 [preauth]
Aug 6 17:50:34 excalibur sshd[1436032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.32.28.125 user=root
Aug 6 17:50:36 excalibur sshd[1436032]: Failed password for root from 45.32.28.125 port 49582 ssh2
...
show less
2026-08-06T23:30:40.308220+08:00 cowgl sshd[2094437]: Connection closed by authenticating user root ...
show more2026-08-06T23:30:40.308220+08:00 cowgl sshd[2094437]: Connection closed by authenticating user root 45.32.28.125 port 46548 [preauth]
2026-08-06T23:30:40.853748+08:00 cowgl sshd[2094689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.32.28.125 user=root
2026-08-06T23:30:42.768296+08:00 cowgl sshd[2094689]: Failed password for root from 45.32.28.125 port 46550 ssh2
2026-08-06T23:30:44.376787+08:00 cowgl sshd[2094689]: Connection closed by authenticating user root 45.32.28.125 port 46550 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩