🇲🇾
Rizzy
2026-11-06 07:59:43
UTC ·
(5 minutes ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇵🇱
Ferron
2026-11-06 07:48:28
UTC ·
(16 minutes ago)
Ferron abuse ban: Custom abuse event: automated_scan
Port Scan
🇺🇸
Charlesiv
2026-11-06 07:12:40
UTC ·
(52 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: //cache/cache/cache.php
Timestamp: 2026-11-06T06:26:08Z
Ray ID: a56206610a0684d8
UA: Mozlila/5.0 (Linux; A ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 14061 (DigitalOcean, LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: //cache/cache/cache.php
Timestamp: 2026-11-06T06:26:08Z
Ray ID: a56206610a0684d8
UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
show less
Bad Web Bot
🇩🇪
Lino Project
2026-11-06 06:24:20
UTC ·
(1 hour ago)
168.144.246.144 - - [06/Nov/2026:07:24:16 +0100] "GET //images/images/cache.php HTTP/1.1" 403 17386 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 ...
show more
168.144.246.144 - - [06/Nov/2026:07:24:16 +0100] "GET //images/images/cache.php HTTP/1.1" 403 17386 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
patrisei
2026-11-06 06:23:48
UTC ·
(1 hour ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-bad-user-agent
Port Scan
Web App Attack
🇩🇪
Stefan Dreher
2026-11-06 06:16:25
UTC ·
(1 hour ago)
168.144.246.144 - - [06/Nov/2026:07:15:23 +0100] "GET //images/images/cache.php HTTP/1.1" 404 187 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mo ...
show more
168.144.246.144 - - [06/Nov/2026:07:15:23 +0100] "GET //images/images/cache.php HTTP/1.1" 404 187 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.246.144 - - [06/Nov/2026:07:15:29 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 187 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.246.144 - - [06/Nov/2026:07:15:44 +0100] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 187 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.246.144 - - [06/Nov/2026:07:15:59 +0100] "GET //images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 187 "www.google.com" "Moz
show less
Hacking
Brute-Force
🇺🇸
kosada.com
2026-11-06 05:00:19
UTC ·
(3 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /images/images/images/images/images/images/images/images/cache.php (HTTP/1.1 port 443, user agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /images/images/images/images/images/images/images/images/cache.php (HTTP/1.1 port 443, user agent: "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36")
show less
Web App Attack
Anonymous
2026-11-06 03:06:08
UTC ·
(4 hours ago)
168.144.246.144 - - [06/Nov/2026:03:06:07 +0000] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 7993 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrom ...
show more
168.144.246.144 - - [06/Nov/2026:03:06:07 +0000] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 7993 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-11-06 03:02:08
UTC ·
(5 hours ago)
Site scraper
Web App Attack
🇩🇪
Mr-Money
2026-11-06 02:35:24
UTC ·
(5 hours ago)
scenario: crowdsecurity/http-bad-user-agent - events: 2 - Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
Web App Attack
Bad Web Bot
🇬🇧
andypiper
2026-11-06 02:02:52
UTC ·
(6 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇫🇮
paissangroup
2026-11-06 01:09:31
UTC ·
(6 hours ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-11-06 00:23:22
UTC ·
(7 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
todix
2026-11-05 21:10:31
UTC ·
(10 hours ago)
"GET //images/images/cache.php HTTP/1.1" 503 1620 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
Bad Web Bot
🇮🇹
VHosting
2026-11-05 18:20:05
UTC ·
(13 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack