๐ฉ๐ช
iNetWorker
2026-03-24 06:16:36
(4 months ago)
trolling for resource vulnerabilities
Web App Attack
๐จ๐ฆ
1gz
2026-03-20 15:22:29
(5 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /feed/
UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ง๐ท
Sipo Chutรฃo
2025-12-31 03:00:01
(7 months ago)
/shelp.php
Hacking
๐ฆ๐บ
Delta Juliet
2025-12-15 23:43:26
(8 months ago)
Exploit scanner detected
Hacking
Web App Attack
Anonymous
2025-12-15 15:01:46
(8 months ago)
[Mon Dec 15 16:01:41.358047 2025] [proxy_fcgi:error] [pid 24702:tid 24791] [client 165.22.244.226:61 ...
show more
[Mon Dec 15 16:01:41.358047 2025] [proxy_fcgi:error] [pid 24702:tid 24791] [client 165.22.244.226:61243] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:01:42.175621 2025] [proxy_fcgi:error] [pid 1285:tid 1383] [client 165.22.244.226:61299] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:01:42.993642 2025] [proxy_fcgi:error] [pid 1285:tid 1337] [client 165.22.244.226:61366] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:01:43.804409 2025] [proxy_fcgi:error] [pid 24702:tid 24779] [client 165.22.244.226:61421] AH01071: Got error 'Primary script unknown'
[Mon Dec 15 16:01:45.556966 2025] [proxy_fcgi:error] [pid 1290:tid 1463] [client 165.22.244.226:61538] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2025-12-15 13:04:03
(8 months ago)
IP & Port Scan.
Port Scan
Brute-Force
SSH
๐บ๐ธ
kosada.com
2025-12-15 11:52:02
(8 months ago)
Web vulnerability probing: /ahax.php
Web App Attack
๐ง๐ช
cmbplf
2025-12-12 18:01:24
(8 months ago)
13.573 requests from abuseipdb.com blacklisted IP (1yr4mos6d)
Brute-Force
Bad Web Bot
๐ฎ๐น
IRT@Unisi
2025-12-12 17:12:31
(8 months ago)
Multiple web server 400 error codes from same source ip.
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2025-12-12 16:51:59
(8 months ago)
165.22.244.226 - - [12/Dec/2025:18:51:59 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 2873 "-" ...
show more
165.22.244.226 - - [12/Dec/2025:18:51:59 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 2873 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
...
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2025-12-12 15:41:56
(8 months ago)
165.22.244.226 - - [12/Dec/2025:17:40:25 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 275 "-" ...
show more
165.22.244.226 - - [12/Dec/2025:17:40:25 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 275 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
165.22.244.226 - - [12/Dec/2025:17:41:56 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 275 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
...
show less
Web App Attack
๐ซ๐ท
900cm
2025-12-12 14:50:25
(8 months ago)
[Fri Dec 12 15:50:21.610263 2025] [php7:error] [pid 1241567:tid 1241567] [client 165.22.244.226:6431 ...
show more
[Fri Dec 12 15:50:21.610263 2025] [php7:error] [pid 1241567:tid 1241567] [client 165.22.244.226:64317] script '/var/www/nextcloud/cord.php' not found or unable to stat
[Fri Dec 12 15:50:23.372314 2025] [php7:error] [pid 1239560:tid 1239560] [client 165.22.244.226:63487] script '/var/www/nextcloud/file2.php' not found or unable to stat
[Fri Dec 12 15:50:25.130280 2025] [php7:error] [pid 1872377:tid 1872377] [client 165.22.244.226:50456] script '/var/www/nextcloud/shelp.php' not found or unable to stat
...
show less
Port Scan
Brute-Force
SSH
๐บ๐ธ
mawan
2025-12-12 13:30:48
(8 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฎ๐ฉ
BPS-StatisticsIndonesia
2025-12-12 12:52:35
(8 months ago)
WP Admin Scan Activities
Web App Attack
๐ฌ๐ท
ppolydoros
2025-12-11 09:20:00
(8 months ago)
Brute-Force
Web App Attack