๐ฉ๐ช
roxyapi
2026-07-28 21:55:31
(57 minutes ago)
Honeypot: automated vulnerability scan / web app attack. Last probe: GET /wp-admin/css/colors/blue
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-07-28 21:31:33
(1 hour ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-07-28 17:18:47
(5 hours ago)
/cgi-bin probe
Web App Attack
๐ฑ๐ป
garmtech.com
2026-07-28 13:25:41
(9 hours ago)
Attempted access to sensitive endpoint (/cgi-bin/) detected. Automated scan or unauthorized probing.
Web App Attack
๐บ๐ธ
Alvino
2026-07-28 13:12:53
(9 hours ago)
Blocked due to using a VPN or data center IP with abuse: 100
Web Spam
VPN IP
๐ธ๐ฌ
Cloudkul Cloudkul
2026-07-28 09:00:47
(13 hours ago)
Multiple unauthorized attempts to access web resources
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-07-27 20:39:00
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
Catalin Negru
2026-07-27 18:55:54
(1 day ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐ฉ๐ช
Skyrider
2026-07-27 18:40:13
(1 day ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-07-27 18:10:27
(1 day ago)
(c5_web_scan) Custom5 Aggressive Web Scan 169.58.42.243 (FR/France/vmi3451464.contaboserver.net): 3 ...
show more
(c5_web_scan) Custom5 Aggressive Web Scan 169.58.42.243 (FR/France/vmi3451464.contaboserver.net): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 169.58.42.243 - - [27/Jul/2026:21:10:24 +0300] "GET /wp-admin/ HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
default:80 169.58.42.243 - - [27/Jul/2026:21:10:25 +0300] "GET /wp-admin/css/ HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
default:80 169.58.42.243 - - [27/Jul/2026:21:10:26 +0300] "GET /wp-admin/css/colors/ HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Port Scan
๐ง๐ฌ
HighWay
2026-07-27 18:03:16
(1 day ago)
169.58.42.243 - - [27/Jul/2026:18:01:39 +0000] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 4686 "-" ...
show more
169.58.42.243 - - [27/Jul/2026:18:01:39 +0000] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 4686 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:18:01:43 +0000] "GET /wp-includes/widgets/ HTTP/1.1" 404 4630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:18:01:44 +0000] "GET /wp-content/ HTTP/1.1" 404 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:18:01:45 +0000] "GET /wp-content/languages/ HTTP/1.1" 404 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:18:01:47 +0000] "GET /wp-content/IXR/ HTTP/1.1" 404 641 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l
...
show less
Port Scan
Bad Web Bot
๐ซ๐ฎ
as211431.net
2026-07-27 16:49:15
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
slay3r9903
2026-07-27 16:47:13
(1 day ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
๐บ๐ธ
paulo.apoloni
2026-07-27 16:07:57
(1 day ago)
169.58.42.243 - - [27/Jul/2026:13:07:42 -0300] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (W ...
show more
169.58.42.243 - - [27/Jul/2026:13:07:42 -0300] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:13:07:44 -0300] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:13:07:47 -0300] "GET /wp-admin/css/colors/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:13:07:50 -0300] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
169.58.42.243 - - [27/Jul/2026:13:07:53 -0300] "GET /wp-admin/includes/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck
...
show less
Web App Attack
๐ซ๐ท
bazter.pro
2026-07-27 10:09:16
(1 day ago)
Fail2Ban: plesk-scanner - 10 failures
Port Scan
Hacking
Brute-Force
Web App Attack