🇪🇸
librebit
2026-11-14 09:18:27
UTC ·
(55 minutes ago)
Brute force
Brute-Force
Anonymous
2026-11-14 07:57:38
UTC ·
(2 hours ago)
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
Web App Attack
🇳🇴
Abuse Buster
2026-11-14 07:50:39
UTC ·
(2 hours ago)
13.70.55.149 - - [14/Nov/2026:08:50:37 +0100] "GET /gecko.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:08:50:37 +0100] "GET /g ...
show more
13.70.55.149 - - [14/Nov/2026:08:50:37 +0100] "GET /gecko.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:08:50:37 +0100] "GET /gel4y.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:08:50:38 +0100] "GET /gh.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-11-14 07:39:50
UTC ·
(2 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
Alpiskris
2026-11-14 07:34:34
UTC ·
(2 hours ago)
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET /gecko.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET / ...
show more
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET /gecko.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET /gel4y.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET /gh.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:07:34:22 +0000] "GET /gif.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:07:34:23 +0000] "GET /google.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 -
...
show less
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-14 06:17:14
UTC ·
(3 hours ago)
40 attacks on PHP URLs:
GET /wp-content/plugins/index.php HTTP/1.1
Web App Attack
🇩🇪
svr
2026-11-14 05:59:21
UTC ·
(4 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇫🇷
mon0
2026-11-14 05:38:09
UTC ·
(4 hours ago)
Blocked by IDS: crowdsecurity/http-backdoors-attempts (2 events)
Hacking
Web App Attack
Anonymous
2026-11-14 05:01:10
UTC ·
(5 hours ago)
Attempted access to sensitive endpoint (/cgi-bin/admin.php) detected. Automated scan or unauthorized probing.
Web App Attack
🇳🇴
Abuse Buster
2026-11-14 04:53:29
UTC ·
(5 hours ago)
13.70.55.149 - - [14/Nov/2026:05:53:27 +0100] "GET /.tmb/LA.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:05:53:27 +0100] "GET ...
show more
13.70.55.149 - - [14/Nov/2026:05:53:27 +0100] "GET /.tmb/LA.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:05:53:27 +0100] "GET /.tmb/admin.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:05:53:28 +0100] "GET /.tmb/class_api.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
Murazaki
2026-11-14 04:33:29
UTC ·
(5 hours ago)
mail.benadel.fr 13.70.55.149 - - [14/Nov/2026:05:33:27 +0100] "GET /cgi-bin/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.22:80"
mail.benade ...
show more
mail.benadel.fr 13.70.55.149 - - [14/Nov/2026:05:33:27 +0100] "GET /cgi-bin/admin.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.22:80"
mail.benadel.fr 13.70.55.149 - - [14/Nov/2026:05:33:27 +0100] "GET /cgi-bin/iR7SzrsOUEP.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.22:80"
mail.benadel.fr 13.70.55.149 - - [14/Nov/2026:05:33:28 +0100] "GET /cgi-bin/install.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.22:80"
mail.benadel.fr 13.70.55.149 - - [14/Nov/2026:05:33:28 +0100] "GET /cgi-bin/sx.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.22.0.22:80"
mail.benadel.fr 13.70.55.149 - - [14/No
...
show less
Bad Web Bot
🇫🇷
regishoussin
2026-11-14 02:45:22
UTC ·
(7 hours ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-14 02:45 UTC.
Bad Web Bot
Web App Attack
Anonymous
2026-11-14 01:59:16
UTC ·
(8 hours ago)
Attempted access to sensitive endpoint (/adminfuns.php7) detected. Automated scan or unauthorized probing.
Web App Attack
🇳🇴
Abuse Buster
2026-11-14 01:59:07
UTC ·
(8 hours ago)
13.70.55.149 - - [14/Nov/2026:02:59:05 +0100] "GET /.well-known/about.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:02:59:05 +0 ...
show more
13.70.55.149 - - [14/Nov/2026:02:59:05 +0100] "GET /.well-known/about.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:02:59:05 +0100] "GET /.well-known/acme-challenge/cloud.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.70.55.149 - - [14/Nov/2026:02:59:06 +0100] "GET /.well-known/acme-challenge/xmrlpc.php?p= HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
Mundo Bueno
2026-11-14 01:42:29
UTC ·
(8 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /shell.php [RATE LIMITED - 1800s quarantine] | Pays: HK | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa
Hacking
Web App Attack