Anonymous
2026-09-10 04:30:43
(12 hours ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇩🇪
Marc
2026-08-02 02:12:00
(1 month ago)
104.28.154.4 - - [02/Aug/2026:04:11:59 +0200] "GET /wp-json HTTP/2.0" 404 314 "-" "anthropic-ai" 104 ...
show more
104.28.154.4 - - [02/Aug/2026:04:11:59 +0200] "GET /wp-json HTTP/2.0" 404 314 "-" "anthropic-ai" 104.28.154.4 - - [02/Aug/2026:04:11:59 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "anthropic-ai" 104.28.154.4 - - [02/Aug/2026:04:11:59 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "anthropic-ai"
show less
Brute-Force
Anonymous
2026-07-25 04:23:58
(1 month ago)
104.28.154.4 - - [24/Jul/2026:21:57:37 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 ...
show more
104.28.154.4 - - [24/Jul/2026:21:57:37 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 104.28.154.4
104.28.154.4 - - [24/Jul/2026:21:57:37 -0500] "GET /.env HTTP/1.1" 403 199 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 104.28.154.4
104.28.154.4 - - [24/Jul/2026:21:57:38 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 104.28.154.4
104.28.154.4 - - [24/Jul/2026:21:57:38 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 104.28.154.4
104.28.154.4 - - [24/Jul/2026:21:57:38 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot" 104.28.154.4
104.28.154.4 - - [24/Jul/2026:21:57:39 -0500] "GET /.env
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-07-25 03:15:41
(1 month ago)
104.28.154.4 - - [25/Jul/2026:05:15:40 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 A ...
show more
104.28.154.4 - - [25/Jul/2026:05:15:40 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] " 104.28.154.4 - - [25/Jul/2026:05:15:40 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "anthropic-ai" 104.28.154.4 - - [25/Jul/2026:05:15:40 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
show less
Brute-Force
🇳🇱
javierin
2026-07-22 18:11:20
(1 month ago)
104.28.154.4 - console.javierin.com - - [22/Jul/2026:18:11:19 +0000] "GET / HTTP/2.0" 200 4505 "-" " ...
show more
104.28.154.4 - console.javierin.com - - [22/Jul/2026:18:11:19 +0000] "GET / HTTP/2.0" 200 4505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
104.28.154.4 - console.javierin.com - - [22/Jul/2026:18:11:20 +0000] "GET /serviceAccountKey.json HTTP/2.0" 404 2509 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] )"
...
show less
Web App Attack
Hacking
🇩🇪
Marc
2026-07-22 14:48:19
(1 month ago)
104.28.154.4 - - [22/Jul/2026:16:48:18 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 A ...
show more
104.28.154.4 - - [22/Jul/2026:16:48:18 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" 104.28.154.4 - - [22/Jul/2026:16:48:18 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 104.28.154.4 - - [22/Jul/2026:16:48:19 +0200] "GET /.gitlab-ci.yml HTTP/2.0" 404 269 "-" "anthropic-ai"
show less
Brute-Force
Anonymous
2026-07-19 20:05:08
(1 month ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇳🇱
Peter Touw
2026-07-17 17:21:59
(1 month ago)
exim2 - plain authenticator failed for (smtp.ratibus.nl) [104.28.154.4]: 535 Incorrect authenticatio ...
show more
exim2 - plain authenticator failed for (smtp.ratibus.nl) [104.28.154.4]: 535 Incorrect authentication data
show less
Brute-Force
🇮🇹
Inartis
2026-07-16 19:40:10
(1 month ago)
2026-07-16T21:40:09.013163mail1.inartis.it postfix/smtpd[1500082]: warning: unknown[104.28.154.4]: S ...
show more
2026-07-16T21:40:09.013163mail1.inartis.it postfix/smtpd[1500082]: warning: unknown[104.28.154.4]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Port Scan
Brute-Force
🇮🇹
VHosting
2026-06-29 17:28:41
(2 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
Anonymous
2026-05-04 16:30:41
(4 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇹🇷
rtbh.com.tr
2026-03-06 20:11:55
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇪🇸
librebit
2026-03-06 02:38:06
(6 months ago)
Brute force
Brute-Force
🇬🇧
andypiper
2026-03-06 02:01:37
(6 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇨🇳
ThreatBook.io
2026-03-06 01:14:10
(6 months ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/104.28.154.4
SSH