|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-04 UTC.
|
Brute-Force
|
|
🇺🇸
dot.mg
|
|
Bruteforce
|
Bad Web Bot
|
|
🇫🇷
Zundapper
|
|
164.92.89.61 - - [03/Nov/2026:14:05:01 +0100] "HEAD /backup HTTP/2.0" 404 0 "http://cosedagatto.it/backup" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36"
164.92.89.61 - ...
show more
164.92.89.61 - - [03/Nov/2026:14:05:01 +0100] "HEAD /backup HTTP/2.0" 404 0 "http://cosedagatto.it/backup" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36"
164.92.89.61 - - [03/Nov/2026:14:05:01 +0100] "HEAD /bc HTTP/2.0" 404 0 "http://cosedagatto.it/bc" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
164.92.89.61 - - [03/Nov/2026:14:05:01 +0100] "HEAD /bc HTTP/2.0" 404 0 "http://cosedagatto.it/bc" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
...
show less
|
Web App Attack
Port Scan
|
|
Anonymous
|
|
Blocked by FortiWeb WAF ML threat detection. ML probability: 95%, Country: US, Attack patterns: WordPress scanning
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
Zundapper
|
|
164.92.89.61 - - [03/Nov/2026:04:14:27 +0100] "HEAD /bk HTTP/2.0" 404 0 "http://cosedagatto.it/bk" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1"
164.92.89.61 - - [03/N ...
show more
164.92.89.61 - - [03/Nov/2026:04:14:27 +0100] "HEAD /bk HTTP/2.0" 404 0 "http://cosedagatto.it/bk" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1"
164.92.89.61 - - [03/Nov/2026:04:14:27 +0100] "HEAD /backup HTTP/2.0" 404 0 "http://cosedagatto.it/backup" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468"
164.92.89.61 - - [03/Nov/2026:04:14:27 +0100] "HEAD /backup HTTP/2.0" 404 0 "http://cosedagatto.it/backup" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468"
164.92.89.61 - - [03/Nov/2026:04:14:27 +0100] "HEAD /new HTTP/2.0" 404 0 "http://cosedagatto.it/new" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
...
show less
|
Web App Attack
Port Scan
|
|
🇨🇭
copestack
|
|
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
|
Web App Attack
|
|
🇺🇸
mnsf
|
|
Abuse Detected (11)
|
Brute-Force
Web App Attack
|
|
🇦🇺
afleventoffice.com.au
|
|
HEAD /backup HTTP/1.1
|
Web App Attack
|
|
🇫🇷
Phenix Info
|
|
SmallGuard.fr/Prestashop Massive 403
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇫🇷
Zundapper
|
|
164.92.89.61 - - [02/Nov/2026:21:55:08 +0100] "HEAD /wordpress HTTP/2.0" 404 0 "http://cosedagatto.it/wordpress" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36"
164.92.89.61 ...
show more
164.92.89.61 - - [02/Nov/2026:21:55:08 +0100] "HEAD /wordpress HTTP/2.0" 404 0 "http://cosedagatto.it/wordpress" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36"
164.92.89.61 - - [02/Nov/2026:21:55:08 +0100] "HEAD /new HTTP/2.0" 404 0 "http://cosedagatto.it/new" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120"
164.92.89.61 - - [02/Nov/2026:21:55:09 +0100] "HEAD /wp HTTP/2.0" 404 0 "http://cosedagatto.it/wp" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36"
164.92.89.61 - - [02/Nov/2026:21:55:09 +0100] "HEAD /backup HTTP/2.0" 404 0 "http://cosedagatto.it/backup" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25"
164.92.89.61 - - [02/Nov/2026:21:55:10 +0100] "H
...
show less
|
Web App Attack
Port Scan
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
mnsf
|
|
Too many Status 40X (24)
|
Brute-Force
Web App Attack
|
|
🇩🇪
Trueforce Threat Report
|
|
Automated report, trolling for resource vulnerabilities
|
Bad Web Bot
Web App Attack
|
|
🇳🇿
Tripwire
|
|
Scanning for exploits - /wordpress
|
Web App Attack
|