🇬🇷
setupgr
2026-06-16 23:00:08
(6 hours ago)
(mod_security) mod_security (id:900001) triggered by 104.207.32.251: 1 in the last 86400 secs; Ports ...
show more
(mod_security) mod_security (id:900001) triggered by 104.207.32.251: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 02:00:08.112691 2026] [security2:error] [pid 2210175:tid 2210247] [client 104.207.32.251:9269] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: asteriassantorini.com"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "ajHVeH9oGssBgNwsPFsljAAAAFA"], referer: https://asteriassantorini.com/wp-login.php
show less
Port Scan
🇩🇪
iNetWorker
2026-06-16 16:39:25
(12 hours ago)
trolling for resource vulnerabilities
Web App Attack
🇫🇷
ELYAZ
2026-06-14 17:32:05
(2 days ago)
(y4) Failed scan -byebye- from 104.207.32.251 (US/United States/-): (CF_ENABLE)
Hacking
🇮🇩
zam
2026-06-11 20:07:30
(5 days ago)
104.207.32.251 - - [11/Jun/2026:20:07:09 +0000] "POST /wp-login.php HTTP/1.1" 301 277
Web App Attack
2026-06-11 03:39:32
(6 days ago)
[osotir.org] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide ...
show more
[osotir.org] httpd-login-spray-site: sites=global; logs=/var/log/httpd/access_log; samples=site_wide=true | distinct_ips=34 | /wp-login.php
show less
Hacking
Web App Attack
🇷🇴
INTEQ
2026-06-10 02:06:52
(1 week ago)
Web attack from 104.207.32.251
Web App Attack
🇫🇷
ELYAZ
2026-06-09 20:35:48
(1 week ago)
(y4) Failed scan -byebye- from 104.207.32.251 (US/United States/-): (CF_ENABLE)
Hacking
🇺🇸
MPL
2026-05-04 05:31:43
(1 month ago)
tcp/80 (12 or more attempts)
Port Scan
🇳🇱
homeshowdomain.nl
2026-04-30 22:04:01
(1 month ago)
Auto-ban: >3000 req/min op 2026-04-30
Web App Attack
SSH
Hacking
🇬🇧
poundawebsiteltd
2026-04-28 02:42:52
(1 month ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.32.251 - - [28/Apr/2026: ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 104.207.32.251 - - [28/Apr/2026:03:42:50 +0100] GET /s3cmd.ini HTTP/1.1 403 3108 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:54:44
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:54:40.453577 2026] [security2:error] [pid 13269:tid 13269] [client 104.207.32.251:61949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paladinmicro.com"] [uri "/config/.env"] [unique_id "aZG0AEE8SyfSfJOyVzp3uAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 11:24:27
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:24:21.977066 2026] [security2:error] [pid 22061:tid 22061] [client 104.207.32.251:18099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owenbee.com"] [uri "/test/.git/config"] [unique_id "aZGs5ZT2rKwXczZ3HcnxKAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-02-15 11:00:33
(4 months ago)
http-sensitive-files - IP: 104.207.32.251 - time="2026-02-15T12:00:33+01:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 104.207.32.251 - time="2026-02-15T12:00:33+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 104.207.32.251 (US/200373) : 4h ban on Ip 104.207.32.251" module=db
show less
Web App Attack
🇮🇩
Burayot
2026-02-15 10:59:04
(4 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.32.251 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.32.251 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-15 06:30:17
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.32.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:30:01.705947 2026] [security2:error] [pid 2252:tid 2252] [client 104.207.32.251:54025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proplanarchitects.com"] [uri "/api/.env"] [unique_id "aZFn6ZQFm9VWaY-XkqKUOwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack