๐ต๐ฑ
Budyn
2026-08-27 06:29:15
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.online | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Caue Henrique
2026-08-10 13:00:37
(1 month ago)
Multiplewebserver500errorcode
Web Spam
Web App Attack
๐ง๐ท
Caue Henrique
2026-08-10 13:00:37
(1 month ago)
Multiplewebserver500errorcode
Web Spam
Web App Attack
๐บ๐ธ
xmission.com
2026-08-10 01:29:58
(1 month ago)
Blocked by UFW (TCP on 1)
Source port: 25242
TTL: 117
Packet length: 52
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 1)
Source port: 25242
TTL: 117
Packet length: 52
TOS: 0x08
This report (for 104.234.32.46) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
threatintelligence_bvc
2026-06-21 21:39:50
(3 months ago)
Brute-Force
๐ซ๐ท
Tilellit.PRO
2026-06-20 14:53:58
(3 months ago)
Fail2Ban banned 104.234.32.46 for security violations in jail wp-armour. Log: 2026/06/20 14:53:58 [e ...
show more
Fail2Ban banned 104.234.32.46 for security violations in jail wp-armour. Log: 2026/06/20 14:53:58 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 104.234.32.46 | Target: wplogin" , client: 104.234.32.46, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "http://comerciogallego.es/wp-admin/"
...
show less
Web Spam
๐จ๐ณ
้น้น
2026-05-26 07:02:10
(3 months ago)
monitor: on VM-0-7-ubuntu | port: 52204 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 52204 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
dtorrer
2026-04-27 12:30:09
(4 months ago)
Brute-force general attack.
Brute-Force
๐ฆ๐บ
screwlooseit.com.au
2026-04-07 02:01:33
(5 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
CA/Canada/-
Web App Attack
๐ฎ๐ฉ
securejdprop
2026-03-29 18:48:20
(5 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
๐บ๐ธ
Peter Racine
2026-03-29 14:44:00
(5 months ago)
Credential stuffing - exchange accounts
Brute-Force
๐ฉ๐ช
Lino Project
2026-02-10 02:43:23
(7 months ago)
104.234.32.46 - - [10/Feb/2026:03:43:21 +0100] "GET /.env.development%20 HTTP/1.1" 404 397 "-" "Mozi ...
show more
104.234.32.46 - - [10/Feb/2026:03:43:21 +0100] "GET /.env.development%20 HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
104.234.32.46 - - [10/Feb/2026:03:43:22 +0100] "GET /admin-app/.env%20 HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Pornomens
2026-02-09 17:59:52
(7 months ago)
104.234.32.46 - - [09/Feb/2026:18:59:10 +0100] "GET /.env.dist HTTP/1.1" 403 4001 "-" "Mozilla/5.0 ( ...
show more
104.234.32.46 - - [09/Feb/2026:18:59:10 +0100] "GET /.env.dist HTTP/1.1" 403 4001 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
104.234.32.46 - - [09/Feb/2026:18:59:23 +0100] "GET /debug/default/view HTTP/1.1" 403 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
104.234.32.46 - - [09/Feb/2026:18:59:52 +0100] "GET /smtp.json HTTP/1.1" 403 4001 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-03 17:25:11
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 12:25:02.949215 2026] [security2:error] [pid 19172:tid 19172] [client 104.234.32.46:42365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.177"] [uri "/wp-content/.env"] [unique_id "aYIvbtLc5HyNQbeln9Sp9gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-03 11:20:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 06:20:18.078172 2026] [security2:error] [pid 30194:tid 30194] [client 104.234.32.46:35075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.215"] [uri "/vendor/laravel/.env"] [unique_id "aYHZ8iuoTaf7NqmyPWNuXwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
