π©πͺ
sigurg
2026-09-18 20:54:33
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
π¬π§
consul.to
2026-09-18 20:41:12
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-18 20:16:59
(1 hour ago)
168.144.96.240 - - [19/Sep/2026:04:16:58 +0800] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTT ...
show more
168.144.96.240 - - [19/Sep/2026:04:16:58 +0800] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 301 279 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π§π¬
HighWay
2026-09-18 19:20:37
(2 hours ago)
168.144.96.240 - - [18/Sep/2026:19:20:14 +0000] "GET //images/images/cache.php HTTP/1.1" 404 4758 "w ...
show more
168.144.96.240 - - [18/Sep/2026:19:20:14 +0000] "GET //images/images/cache.php HTTP/1.1" 404 4758 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:19:20:28 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 4756 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:19:20:35 +0000] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 404 4758 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
π©πͺ
spirttm
2026-09-18 19:01:20
(3 hours ago)
168.144.96.240 - - [18/Sep/2026:18:58:54 +0000] "GET //images/images/cache.php HTTP/1.1" 403 186 "ww ...
show more
168.144.96.240 - - [18/Sep/2026:18:58:54 +0000] "GET //images/images/cache.php HTTP/1.1" 403 186 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:18:59:10 +0000] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 403 186 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:18:59:34 +0000] "GET //images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 403 186 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:18:59:47 +0000] "GET //images/images/images/images/images/images/images/cache.php HTTP/1.1" 403 186 "
...
show less
Port Scan
Web App Attack
π¦πΊ
2000cn.com.au
2026-09-18 18:49:19
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
πΊπΈ
Aurealize
2026-09-18 18:14:21
(3 hours ago)
Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: //wp-cont ...
show more
Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: //wp-content/plugins/plugins/cache.php.
show less
Web App Attack
Hacking
π«π·
masterguru
2026-09-18 17:59:38
(4 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-19 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "mozlila" at REQUEST_HEADERS:User-Agent. (1100000-195)
show less
Bad Web Bot
π΅π±
Budyn
2026-09-18 17:44:47
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.wtf | URI: //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php | UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-18 16:27:10
(5 hours ago)
168.144.96.240 - - [18/Sep/2026:13:26:57 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1 ...
show more
168.144.96.240 - - [18/Sep/2026:13:26:57 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:13:27:03 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
168.144.96.240 - - [18/Sep/2026:13:27:09 -0300] "GET //wp-content/plugins/plugins/cache.php HTTP/1.1" 404 826 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
...
show less
Port Scan
π©πͺ
LRob
2026-09-18 15:18:35
(6 hours ago)
Asking over plain http and never following the redirect served β a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served β a crawler that reads nothing it asks for | method: GET | path: //images/images/cache.php | ua: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112. | 2026-09-18 15:18 UTC
show less
Bad Web Bot
π©πͺ
Gwyneth Llewelyn
2026-09-18 14:41:07
(7 hours ago)
168.144.96.240 - - [18/Sep/2026:15:41:04 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTT ...
show more
168.144.96.240 - - [18/Sep/2026:15:41:04 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/2.0" 404 994 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
show less
Bad Web Bot
π©πͺ
dbmwebdesign
2026-09-18 14:00:25
(8 hours ago)
Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban
Web App Attack
Anonymous
2026-09-18 13:40:01
(8 hours ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-09-18 13:35:18
(8 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host