Anonymous
2026-09-21 04:05:05
(7 hours ago)
PHP file probing detected by Fail2Ban
Web App Attack
🇫🇷
LRob
2026-09-21 02:49:09
(8 hours ago)
Walking a list of paths that do not exist (scanning) | method: GET | path: /images/images/cache.php ...
show more
Walking a list of paths that do not exist (scanning) | method: GET | path: /images/images/cache.php (+2 more) | 2026-09-21 02:49 UTC
show less
Port Scan
Web App Attack
🇷🇺
cnaize
2026-09-21 01:06:58
(10 hours ago)
Malicious activity blocked by Meds firewall
Port Scan
🇧🇷
dominioz
2026-09-21 00:29:45
(11 hours ago)
2026-09-21 00:29:16 GET /images/images/cache.php - - 152.42.253.169 HTTP/1.1 Mozlila/5.0+(Linux;+And ...
show more
2026-09-21 00:29:16 GET /images/images/cache.php - - 152.42.253.169 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 www.google.com 301 499
...
show less
Brute-Force
Web App Attack
🇺🇸
cwytech
2026-09-20 22:56:29
(12 hours ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-bad-user-agent.
Bad Web Bot
Web App Attack
🇫🇷
spot
2026-09-20 22:41:53
(12 hours ago)
152.42.253.169 - - [20/Sep/2026:23:41:50 +0100] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1 ...
show more
152.42.253.169 - - [20/Sep/2026:23:41:50 +0100] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 668 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
Hacking
🇺🇸
NXTwoThou
2026-09-20 21:59:14
(13 hours ago)
/images/images/cache.php
Web App Attack
🇫🇷
dynamix
2026-09-20 21:49:19
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-20 20:55:55
(14 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
Anonymous
2026-09-20 20:53:38
(14 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
Anonymous
2026-09-20 20:49:12
(14 hours ago)
152.42.253.169 - - [21/Sep/2026:04:49:12 +0800] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTT ...
show more
152.42.253.169 - - [21/Sep/2026:04:49:12 +0800] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 196 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
fabrice
2026-09-20 19:51:24
(15 hours ago)
Repeated Trusted domain errors : 152.42.253.169 - - [20/Sep/2026:21:51:23 +0200] "GET /wp-content/pl ...
show more
Repeated Trusted domain errors : 152.42.253.169 - - [20/Sep/2026:21:51:23 +0200] "GET /wp-content/plugins/plugins/cache.php HTTP/1.1" 403 5415 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
🇫🇷
sthoyer.de
2026-09-20 18:12:25
(17 hours ago)
152.42.253.169 - - [20/Sep/2026:20:11:57 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "ww ...
show more
152.42.253.169 - - [20/Sep/2026:20:11:57 +0200] "GET //images/images/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
152.42.253.169 - - [20/Sep/2026:20:12:09 +0200] "GET /images/images/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
152.42.253.169 - - [20/Sep/2026:20:12:23 +0200] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 302 495 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-20 18:07:02
(17 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
AetherFox
2026-09-20 17:15:21
(18 hours ago)
AetherFox VoidGuard detected: [Sun Sep 20 17:14:48.923715 2026] [authz_core:error] [pid 3234461:tid ...
show more
AetherFox VoidGuard detected: [Sun Sep 20 17:14:48.923715 2026] [authz_core:error] [pid 3234461:tid 3234465] [client 152.42.253.169:57990] AH01630: client denied by server configuration: proxy:https://[MASKED]/images/images/cache.php, referer: www.google.com
[Sun Sep 20 17:14:56.281746 2026] [authz_core:error] [pid 3234461:tid 3234464] [client 152.42.253.169:64665] AH01630: client denied by server configuration: proxy:https://[MASKED]/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php, referer: www.google.com
[Sun Sep 20 17:15:12.639345 2026] [authz_core:error] [pid 3234462:tid 3234487] [client 152.42.253.169:49628] AH01630: client denied by server configuration: proxy:https://[MASKED]/images/images/images/images/images/images/images/images/cache.php, referer: www.google.com
[Sun Sep 20 17:15:14.095528 2026] [authz_core:error] [pid 3234462:tid 3234501] [client 152.42.253.169:52557] AH01630: client denied by server configuration: proxy:https://[MASKED]/images/imag
...
show less
Bad Web Bot
Web App Attack