|
🇸🇮
administrator
|
|
2026-10-25 02:43:01,917 fail2ban.actions [1053]: NOTICE [apache-fakegooglebot] Ban 104.28.162.61
2026-10-25 02:43:01,917 fail2ban.actions [1053]: NOTICE [apache-fakegooglebot] Ban 104.28.162.61
2026-10-25 02:43:01,917 fail2ban.actions ...
show more
2026-10-25 02:43:01,917 fail2ban.actions [1053]: NOTICE [apache-fakegooglebot] Ban 104.28.162.61
2026-10-25 02:43:01,917 fail2ban.actions [1053]: NOTICE [apache-fakegooglebot] Ban 104.28.162.61
2026-10-25 02:43:01,917 fail2ban.actions [1053]: NOTICE [apache-fakegooglebot] Ban 104.28.162.61
...
show less
|
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
|
Exploited Host
Web App Attack
|
|
Anonymous
|
|
104.28.162.61 - - [28/Oct/2026:22:13:59 +0100] "GET /. HTTP/1.1" 301 169 "https:///search?q=" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.61 - - \[28/Oct/2026:12:39:46 +0100\] "GET /.git/HEAD HTTP/1.1" 301 6603 "https://www.google.com/search\?q=trouwenaanboord.nl" "Mozilla/5.0 \( ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.61 - - \[28/Oct/2026:12:39:46 +0100\] "GET /.git/HEAD HTTP/1.1" 301 6603 "https://www.google.com/search\?q=trouwenaanboord.nl" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:137.0\) Gecko/20100101 Firefox/137.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
Rip
|
|
Restricted File Access Attempts
|
Port Scan
Web App Attack
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-10-25
|
Web App Attack
SSH
Hacking
|
|
🇩🇪
fynndows.de
|
|
2026-10-20T10:57:58.878479+00:00 24fire sshd-session[161120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61
2026-10-20T10:58:00.629344+00:00 24fire sshd-session[161120]: Failed password for inva ...
show more
2026-10-20T10:57:58.878479+00:00 24fire sshd-session[161120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61
2026-10-20T10:58:00.629344+00:00 24fire sshd-session[161120]: Failed password for invalid user mailcow from 104.28.162.61 port 10433 ssh2
...
show less
|
Brute-Force
SSH
|
|
🇩🇪
fynndows.de
|
|
2026-10-20T10:41:01.123272+00:00 24fire sshd-session[150000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61
2026-10-20T10:41:03.055965+00:00 24fire sshd-session[150000]: Failed password for inva ...
show more
2026-10-20T10:41:01.123272+00:00 24fire sshd-session[150000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61
2026-10-20T10:41:03.055965+00:00 24fire sshd-session[150000]: Failed password for invalid user samuel from 104.28.162.61 port 11202 ssh2
...
show less
|
Brute-Force
SSH
|
|
🇩🇪
fynndows.de
|
|
2026-10-20T10:24:14.749216+00:00 24fire sshd-session[138687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61 user=root
2026-10-20T10:24:16.993117+00:00 24fire sshd-session[138687]: Failed passwo ...
show more
2026-10-20T10:24:14.749216+00:00 24fire sshd-session[138687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.28.162.61 user=root
2026-10-20T10:24:16.993117+00:00 24fire sshd-session[138687]: Failed password for root from 104.28.162.61 port 9692 ssh2
...
show less
|
Brute-Force
SSH
|
|
🇳🇱
Alt255
|
|
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.61 - - [13/Oct/2026:07:37:31 +0200] "HEAD /.env.dist HTTP/1.1" 404 6009 "https://www.google.com/search?q=apiwerkbon-bazen.bdaconnect.nl ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.61 - - [13/Oct/2026:07:37:31 +0200] "HEAD /.env.dist HTTP/1.1" 404 6009 "https://www.google.com/search?q=apiwerkbon-bazen.bdaconnect.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
dynamix
|
|
WordPress XMLRPC Brute Force Attack
|
Brute-Force
Web App Attack
|
|
🇹🇼
tye
|
|
Wazuh Alert Evidence: 104.28.162.61 (104.28.162.61) - - [29/Sep/2026:08:37:14 +0800] "CONNECT api.ipify.org:443 HTTP/1.1" 405 5114 "-" "-"
|
Web App Attack
|
|
🇷🇴
DamonOne
|
|
Blocked by OPNsense; 8 hits, proto=tcp, ports=9262
|
Port Scan
Hacking
|
|
🇮🇹
VHosting
|
|
Detected mail brute force attack from 4 different servers
|
Brute-Force
|