🇨🇭
copestack
2026-11-06 02:30:07
UTC ·
(6 days ago)
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
Web App Attack
🇬🇧
consul.to
2026-11-05 14:29:21
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-05 13:50:15
UTC ·
(1 week ago)
157.245.51.6 rolistore.com - [05/Nov/2026:07:49:48 -0600] "GET //images/images/cache.php HTTP/1.1" 403 158 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.31 ...
show more
157.245.51.6 rolistore.com - [05/Nov/2026:07:49:48 -0600] "GET //images/images/cache.php HTTP/1.1" 403 158 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"\n157.245.51.6 rolistore.com - [05/Nov/2026:07:49:51 -0600] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 403 158 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"\n157.245.51.6 rolistore.com - [05/Nov/2026:07:49:53 -0600] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 403 158 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"\n157.245.51.6 rolistore.com - [05/Nov/2026:07:49:55 -0600] "GET //images/images/images/images/images/ima
show less
DDoS Attack
Web App Attack
Anonymous
2026-11-05 13:05:06
UTC ·
(1 week ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
Jurilia
2026-11-05 13:04:13
UTC ·
(1 week ago)
Probing for secret/configuration files (.env, .git, credentials) that do not exist. Repeat activity after an earlier report; last seen 2026-11-05T13:04:13Z (UTC). Still blocked.
Web App Attack
🇩🇪
Jurilia
2026-11-05 13:03:00
UTC ·
(1 week ago)
Probing for secret/configuration files (.env, .git, credentials) that do not exist. 1 request. Paths probed: /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php. First seen 2026-11-05T13:03:00Z, last seen 2026-11-05T13:03:00Z (UTC). Blocked automatically.
Web App Attack
🇳🇴
Abuse Buster
2026-11-05 11:55:40
UTC ·
(1 week ago)
157.245.51.6 - - [05/Nov/2026:12:55:38 +0100] "GET //images/images/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobli ...
show more
157.245.51.6 - - [05/Nov/2026:12:55:38 +0100] "GET //images/images/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-11-05 11:52:11
UTC ·
(1 week ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
🇩🇪
Séfora Srl
2026-11-05 10:20:42
UTC ·
(1 week ago)
crowdsecurity/http-bad-user-agent detected by CrowdSec
Bad Web Bot
🇩🇪
AetherFox
2026-11-05 09:26:11
UTC ·
(1 week ago)
AetherFox VoidGuard detected: [Thu Nov 05 09:25:29.819246 2026] [security2:error] [pid 2170326:tid 2170349] [client 157.245.51.6:63998] [client 157.245.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(Mozlila|Bulid|Moblie)" a ...
show more
AetherFox VoidGuard detected: [Thu Nov 05 09:25:29.819246 2026] [security2:error] [pid 2170326:tid 2170349] [client 157.245.51.6:63998] [client 157.245.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(Mozlila|Bulid|Moblie)" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/AetherFox.conf"] [line "89"] [id "100066"] [msg "typo-fingerprint UA blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/images/images/cache.php"] [unique_id "auxLibJCMdk1kTPbV8Q4DwAAABU"], referer: www.google.com
[Thu Nov 05 09:25:39.167426 2026] [security2:error] [pid 2170326:tid 2170346] [client 157.245.51.6:59518] [client 157.245.51.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(Mozlila|Bulid|Moblie)" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/AetherFox.conf"] [line "89"] [id "100066"] [msg "typo-fingerprint UA blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconige
...
show less
Hacking
Bad Web Bot
🇮🇹
VHosting
2026-11-05 08:20:04
UTC ·
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
infra-monitor
2026-11-05 04:00:08
UTC ·
(1 week ago)
Automated ban via infra-monitor: crowdsecurity/http-bad-user-agent
Bad Web Bot
🇵🇱
sledzik1984
2026-11-05 03:55:05
UTC ·
(1 week ago)
157.245.51.6 - - [05/Nov/2026:04:54:44 +0100] "GET //images/images/cache.php HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobli ...
show more
157.245.51.6 - - [05/Nov/2026:04:54:44 +0100] "GET //images/images/cache.php HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
157.245.51.6 - - [05/Nov/2026:04:54:55 +0100] "GET //images/images/cache.php HTTP/1.1" 404 47 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
157.245.51.6 - - [05/Nov/2026:04:55:04 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 301 169 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Web App Attack
🇺🇸
dot.mg
2026-11-05 03:54:01
UTC ·
(1 week ago)
Scan of vulnerable files
Web App Attack
🇨🇭
Masterpiece
2026-11-05 03:37:02
UTC ·
(1 week ago)
Abusive web bot (http-bad-user-agent), 2 requests.
Bad Web Bot