🇺🇦
URAN Publishing Service
2026-09-06 19:56:44
(5 hours ago)
[06/Sep/2026:22:56:44 +0300] -- 104.234.32.82 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇹🇷
neron
2026-08-15 23:06:48
(3 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇩🇪
Fahreddin Ergin
2026-08-05 14:12:28
(1 month ago)
Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)
Brute-Force
SSH
Port Scan
🇩🇪
polido
2026-08-05 09:16:40
(1 month ago)
[debian-4gb-nbg1-1] Unauthorized connection attempt to port 3394 from 104.234.32.82
Port Scan
🇩🇪
Tamsweb
2026-08-05 09:16:04
(1 month ago)
Unauthorized connection attempt or scan from 104.234.32.82 on port 3394
...
Port Scan
🇩🇪
iNetWorker
2026-08-05 09:14:38
(1 month ago)
trying to access non-authorized port
Port Scan
🇧🇪
cmbplf
2026-07-30 00:33:16
(1 month ago)
5.541 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
antlac1
2026-07-02 14:11:58
(2 months ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-17 11:14:23
(2 months ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-06-17 01:18:31
(2 months ago)
15 attempts against mh-modsecurity-ban on pf221103
Brute-Force
Web App Attack
🇫🇮
bittiguru.fi
2026-05-23 03:13:46
(3 months ago)
104.234.32.82 - [23/May/2026:06:05:42 +0300] "POST /wp-login.php HTTP/1.1" 403 3151 "https://ereijon ...
show more
104.234.32.82 - [23/May/2026:06:05:42 +0300] "POST /wp-login.php HTTP/1.1" 403 3151 "https://ereijonen.fi/wp-admin/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15" "3.23"
104.234.32.82 - [23/May/2026:06:07:33 +0300] "POST /wp-login.php HTTP/1.1" 404 5817 "https://ereijonen.fi/wp-admin/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" "3.89"
104.234.32.82 - [23/May/2026:06:08:33 +0300] "POST /wp-login.php HTTP/1.1" 404 5817 "https://ereijonen.fi/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" "3.89"
104.234.32.82 - [23/May/2026:06:09:34 +0300] "POST /wp-login.php HTTP/1.1" 404 5817 "https://ereijonen.fi/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "3.89"
104.234.32.82 - [23/May/2026:06:13:46 +0300] "POST /wp-login.php HTTP/1.1" 4
...
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 03:43:16
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 23:43:06.228554 2026] [security2:error] [pid 4712:tid 4712] [client 104.234.32.82:24081] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mathewsdental.com"] [uri "/wp-config.php.old"] [unique_id "ae7bSmE4EFMSzP9nuOiUhQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2026-04-27 02:41:05
(4 months ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 01:19:04
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 21:18:53.306606 2026] [security2:error] [pid 29788:tid 29788] [client 104.234.32.82:29879] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nancyscafeandcatering.com"] [uri "/api/.env"] [unique_id "ae65fYuXuNJKDMl8n1wU0AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 00:14:36
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.234.32.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 20:14:19.276726 2026] [security2:error] [pid 9419:tid 9419] [client 104.234.32.82:57981] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/.env.test"] [unique_id "ae6qW1gNaDh20V6p2L9-OwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
