π¦π©
bakunin1848
2026-06-07 10:28:04
(1 day ago)
Firewall IPS Detection on 07-06-2026 at 12:28:04
Port Scan
Exploited Host
π©πͺ
netclix.gr
2026-06-06 14:53:20
(1 day ago)
(bot_qv) Bot Scraping QuickView 45.9.168.96 (HU/Hungary/server26014.maxko-hosting.net): 1 in the las ...
show more
(bot_qv) Bot Scraping QuickView 45.9.168.96 (HU/Hungary/server26014.maxko-hosting.net): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 45.9.168.96 - - [06/Jun/2026:17:53:16 +0300] "GET /index.php?dispatch=products.quick_view&product_id=17889&prev_url=index.php%3Fdispatch%3Dcategories.view%26category_id%3D1035&n_items=17944%2C17943%2C17939%2C17938%2C17937%2C17936%2C17889%2C17888%2C17887%2C17842%2C17841%2C17777 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com)"
show less
Port Scan
πΊπΈ
TPI-Abuse
2026-06-04 01:55:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.9.168.96 (server26014.maxko-hosting.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 45.9.168.96 (server26014.maxko-hosting.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 21:55:50.502730 2026] [security2:error] [pid 2309:tid 2309] [client 45.9.168.96:39186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.brbcash.com"] [uri "/.git/config"] [unique_id "aiDbJibzUPEc4JDc3v-lVgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
β¨
2026-06-02 00:19:11
(6 days ago)
Rule : PLESK BOT
2026-06-02 02:18:36 Unauthorized login attempt to Plesk Panel from IP 45.9.168.96 w ...
show more
Rule : PLESK BOT
2026-06-02 02:18:36 Unauthorized login attempt to Plesk Panel from IP 45.9.168.96 with username admin
show less
Hacking
Brute-Force
Web App Attack
π¦π©
bakunin1848
2026-05-31 20:05:05
(1 week ago)
Firewall IPS Detection on 31-05-2026 at 22:05:05
Port Scan
Exploited Host
π©πͺ
Martin Lundstrom
2026-05-31 11:12:17
(1 week ago)
https://www.eagleeye-intelligence.com β IDS: network scan. Automatically detected and blocked.
Port Scan
Web App Attack
π¦πΊ
oncord
2026-05-31 07:33:51
(1 week ago)
Form spam
Web Spam
πΊπΈ
mnsf
2026-05-31 07:05:20
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
Anonymous
2026-05-31 00:21:02
(1 week ago)
Malicious activity detected
Hacking
Web App Attack
π¦πΊ
oncord
2026-05-28 21:22:08
(1 week ago)
Form spam
Web Spam
πΊπΈ
TPI-Abuse
2026-05-27 19:03:02
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 45.9.168.96 (server26014.maxko-hosting.net): 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 45.9.168.96 (server26014.maxko-hosting.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 15:02:56.091188 2026] [security2:error] [pid 31003:tid 31003] [client 45.9.168.96:39848] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||proventransmission.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "proventransmission.com"] [uri "/dump.sql"] [unique_id "ahc_4JfxGI_yUdo-X-KzNQAAAAk"], referer: proventransmission.com/dump.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
LRob.fr
2026-05-27 11:15:13
(1 week ago)
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ...
show more
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail
show less
Brute-Force
Web App Attack
π«π·
MatStef132
2026-05-23 15:48:43
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
Anonymous
2026-05-15 10:00:35
(3 weeks ago)
2026-05-15 01:01:19,381 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
2026-05-15 ...
show more
2026-05-15 01:01:19,381 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
2026-05-15 04:00:44,628 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
2026-05-15 07:00:41,316 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
2026-05-15 10:00:41,325 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
2026-05-15 13:00:34,486 fail2ban.actions [3625835]: NOTICE [tor] Ban 45.9.168.96
show less
Brute-Force