2026-10-13 10:31:09
(2 minutes ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇫🇷
Baking333
2026-10-13 07:46:06
(2 hours ago)
[redacted] 104.22.127.29 - - [13/Oct/2026:08:45:56 +0100] "GET /fr/.env/ HTTP/2.0" 404 162312 "https ...
show more
[redacted] 104.22.127.29 - - [13/Oct/2026:08:45:56 +0100] "GET /fr/.env/ HTTP/2.0" 404 162312 "https://[redacted]/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" [redacted] 104.22.127.29 - - [13/Oct/2026:08:46:02 +0100] "GET /.git/config HTTP/2.0" 301 56 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇫🇷
arsonist
2026-10-13 06:39:12
(3 hours ago)
[fail2ban]
2026-10-13T06:39:12.015435+00:00 arson caddy[1697]: {"level":"info","ts":1791873552.01535 ...
show more
[fail2ban]
2026-10-13T06:39:12.015435+00:00 arson caddy[1697]: {"level":"info","ts":1791873552.015351,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"11310","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/css/colors/blue/index.php","headers":{"Cf-Ipcountry":["AU"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Cdn-Loop":["cloudflare; loops=1"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US, en; q=0.9"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, */*; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Accept-Encoding":["gzip, br"],"Dnt":["1"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"Sec-Fetch-User":["?1"],"Cache-Control":
...
show less
Bad Web Bot
2026-10-13 01:59:19
(8 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
mashamal
2026-10-12 23:41:20
(10 hours ago)
unauthorized access request
...
Web App Attack
🇫🇷
arsonist
2026-10-12 18:30:31
(16 hours ago)
[fail2ban]
2026-10-12T18:30:30.775750+00:00 arson caddy[1697]: {"level":"info","ts":1791829830.77570 ...
show more
[fail2ban]
2026-10-12T18:30:30.775750+00:00 arson caddy[1697]: {"level":"info","ts":1791829830.7757015,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"12553","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/css/admin.ph","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"Sec-Fetch-Site":["none"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"X-Forwarded-For":["13.70.110.189"],"Sec-Fetch-Mode":["navigate"],"Cf-Ray":["a4982d196d22c0f5-SYD"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry"
...
show less
Bad Web Bot
🇫🇷
arsonist
2026-10-12 02:01:03
(1 day ago)
[fail2ban]
2026-10-12T02:01:02.285929+00:00 arson caddy[1697]: {"level":"info","ts":1791770462.28589 ...
show more
[fail2ban]
2026-10-12T02:01:02.285929+00:00 arson caddy[1697]: {"level":"info","ts":1791770462.285898,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"11137","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/admin-ajax.php","headers":{"X-Forwarded-For":["161.33.228.223"],"Cdn-Loop":["cloudflare; loops=1"],"X-Forwarded-Proto":["https"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"],"Cf-Connecting-Ip":["161.33.228.223"],"Accept":["*/*"],"Accept-Encoding":["gzip, br"],"Cf-Ray":["a49283ac5b74696a-SYD"],"Cf-Ipcountry":["AU"],"Cf-Visitor":["{\"scheme\":\"https\"}"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","durat
...
show less
Bad Web Bot
🇫🇷
arsonist
2026-10-10 15:00:32
(2 days ago)
[fail2ban]
2026-10-10T15:00:31.571489+00:00 arson caddy[1712]: {"level":"info","ts":1791644431.57108 ...
show more
[fail2ban]
2026-10-10T15:00:31.571489+00:00 arson caddy[1712]: {"level":"info","ts":1791644431.5710816,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"9309","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/this_is_a_new_hello_world.php","headers":{"Cf-Connecting-Ip":["20.213.164.192"],"Cf-Ipcountry":["AU"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, br"],"X-Forwarded-For":["20.213.164.192"],"Cf-Ray":["a4867ec06bf049ba-SYD"],"Cdn-Loop":["cloudflare; loops=1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","duration":0.000187974,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain;
...
show less
Bad Web Bot
2026-10-09 06:29:21
(4 days ago)
Aggressive web scan
Web App Attack
🇹🇷
crnpekgoz
2026-10-07 07:18:32
(6 days ago)
Malicious HTTP GET request for '/wp-admin/css/' (HTTP 404) from 104.22.127.29. Threat: Web Güvenlik ...
show more
Malicious HTTP GET request for '/wp-admin/css/' (HTTP 404) from 104.22.127.29. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
show less
Web App Attack
🇫🇷
arsonist
2026-10-07 04:44:09
(6 days ago)
[fail2ban]
2026-10-07T04:44:09.529371+00:00 arson caddy[1712]: {"level":"info","ts":1791348249.52933 ...
show more
[fail2ban]
2026-10-07T04:44:09.529371+00:00 arson caddy[1712]: {"level":"info","ts":1791348249.5293372,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"12879","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/css/colors/modern/","headers":{"Cdn-Loop":["cloudflare; loops=1"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Mobile":["?0"],"X-Forwarded-Proto":["https"],"Sec-Fetch-Site":["none"],"Cf-Ray":["a46a3fbe9cb56c96-SYD"],"Sec-Fetch-User":["?1"],"X-Forwarded-For":["20.92.77.159"],"Cf-Ipcountry":["AU"],"Sec-Fetch-Dest":["document"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, */*; q=0.8, application/signed-exchange; v=b3; q=0.7"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0
...
show less
Bad Web Bot
🇫🇷
arsonist
2026-10-07 01:14:39
(6 days ago)
[fail2ban]
2026-10-07T01:14:38.942566+00:00 arson caddy[1712]: {"level":"info","ts":1791335678.94252 ...
show more
[fail2ban]
2026-10-07T01:14:38.942566+00:00 arson caddy[1712]: {"level":"info","ts":1791335678.9425204,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"11154","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/js/widgets/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-For":["20.92.77.159"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"Cache-Control":["max-age=0"],"X-Forwarded-Proto":["https"],"Cf-Connecting-Ip":["20.92.77.159"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":["AU"],"Accept-Language":["en-US, en; q=0.9"],"Cf-Ray":["a4690cd87983185b-SYD"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\",
...
show less
Bad Web Bot
🇫🇷
LoneRider
2026-10-06 17:31:32
(6 days ago)
[06/Oct/2026:19:31:20.438397 +0200] asUwaOF_gC1dePMGWbIH_wAAAAc 104.22.127.29 33648 127.0.0.1 7081
[ ...
show more
[06/Oct/2026:19:31:20.438397 +0200] asUwaOF_gC1dePMGWbIH_wAAAAc 104.22.127.29 33648 127.0.0.1 7081
[06/Oct/2026:19:31:31.423658 +0200] asUwc03mrQjo0hIo-KUQ7QAAAAk 104.22.127.29 37054 127.0.0.1 7081
[06/Oct/2026:19:31:31.739706 +0200] asUwc-yLzf-GOdcqYucsFgAAAAU 104.22.127.29 37082 127.0.0.1 7081
...
show less
Hacking
🇹🇷
crnpekgoz
2026-10-06 17:24:54
(6 days ago)
Malicious HTTP GET request for '/wp-login.php' (HTTP 404) from 104.22.127.29. Threat: Web Güvenlik A ...
show more
Malicious HTTP GET request for '/wp-login.php' (HTTP 404) from 104.22.127.29. Threat: Web Güvenlik Açığı Taraması (.env/bot). Blocked by WardenGuard Web Shield.
show less
Web App Attack
🇫🇷
arsonist
2026-10-06 13:08:20
(6 days ago)
[fail2ban]
2026-10-06T13:08:20.307955+00:00 arson caddy[1712]: {"level":"info","ts":1791292100.30790 ...
show more
[fail2ban]
2026-10-06T13:08:20.307955+00:00 arson caddy[1712]: {"level":"info","ts":1791292100.3079076,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.22.127.29","remote_port":"9661","client_ip":"104.22.127.29","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/wp-admin/wp.php","headers":{"Dnt":["1"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Cf-Ray":["a464e4e4898c4df6-SYD"],"Accept":["text/html, application/xhtml+xml, application/xml; q=0.9, image/webp, image/apng, */*; q=0.8, application/signed-exchange; v=b3; q=0.7"],"Accept-Encoding":["gzip, br"],"Sec-Fetch-Site":["none"],"Cache-Control":["max-age=0"],"X-Forwarded-For":["20.92.77.159"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Sec-Ch-Ua":["\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\""],"C
...
show less
Bad Web Bot
