🇫🇷
arsonist
2026-10-07 16:15:56
UTC ·
(1 month ago)
[fail2ban]
2026-10-07T16:15:55.593577+00:00 arson caddy[1712]: {"level":"info","ts":1791389755.593547,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"185.192.69.80","remote_port":"20821","client_ip":"185.192.69.80", ...
show more
[fail2ban]
2026-10-07T16:15:55.593577+00:00 arson caddy[1712]: {"level":"info","ts":1791389755.593547,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"185.192.69.80","remote_port":"20821","client_ip":"185.192.69.80","proto":"HTTP/2.0","method":"GET","host":"mstdn.aos.lol","uri":"/wp-admin/css/goods.php","headers":{"Referer":["http://mstdn.aos.lol/wp-admin/css/goods.php"],"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/2.0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"mstdn.aos.lol","ech":false}},"bytes_read":0,"user_id":"","duration":0.000081984,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇮🇹
VHosting
2026-10-07 09:05:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
abenage
2026-10-07 08:39:23
UTC ·
(1 month ago)
185.192.69.80 - - [07/Oct/2026:02:39:22 -0600] "GET /000.php HTTP/2.0" 404 162 "http://[redacted]/000.php" "Go-http-client/2.0"
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-09-15 15:28:41
UTC ·
(1 month ago)
HTTP vulnerability scanning
Web App Attack
🇨🇭
backslash
2026-09-15 15:27:00
UTC ·
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
ghostwarriors
2026-09-15 13:50:10
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-15 13:40:18
UTC ·
(1 month ago)
185.192.69.80 - - [15/Sep/2026:15:40:15 +0200] "GET /wp-includes/core.php HTTP/2.0" 404 317 "http://[site]/wp-includes/core.php" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:16 +0200] "GET /wp-includes/cookie.php HTTP/2.0" 404 317 "http: ...
show more
185.192.69.80 - - [15/Sep/2026:15:40:15 +0200] "GET /wp-includes/core.php HTTP/2.0" 404 317 "http://[site]/wp-includes/core.php" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:16 +0200] "GET /wp-includes/cookie.php HTTP/2.0" 404 317 "http://[site]/wp-includes/cookie.php" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:14 +0200] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p= HTTP/2.0" 404 362 "http://[site]/wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p=" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:14 +0200] "GET /wp-content/plugins/bbpress/file5.php HTTP/2.0" 404 294 "http://[site]/wp-content/plugins/bbpress/file5.php" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:15 +0200] "GET /wpx/index.php HTTP/2.0" 404 294 "http://[site]/wpx/index.php" "Go-http-client/2.0"
185.192.69.80 - - [15/Sep/2026:15:40:16 +0200] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 294 "http://[site]/wp-content/plugins/buddypress
show less
Web App Attack
Brute-Force
🇨🇭
Origon
2026-09-15 12:36:11
UTC ·
(1 month ago)
http-wordpress-scan - IP: 185.192.69.80 - time="2026-09-15T14:36:11+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 185.192.69.80 (GB/62240) : 4h ban on Ip 185.192.69.80" mod ...
show more
http-wordpress-scan - IP: 185.192.69.80 - time="2026-09-15T14:36:11+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 185.192.69.80 (GB/62240) : 4h ban on Ip 185.192.69.80" module=db
show less
Web App Attack
🇫🇷
Octopuce
2026-06-30 00:33:27
UTC ·
(4 months ago)
Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/themes/theme-check/theme-chec ...
Web App Attack
🇮🇹
Inartis
2026-06-24 20:00:06
UTC ·
(4 months ago)
[Wed Jun 24 22:00:03.962207 2026] [proxy_fcgi:error] [pid 1749513:tid 128160280606400] [client 185.192.69.80:36523] AH01071: Got error 'Primary script unknown'
[Wed Jun 24 22:00:05.714958 2026] [proxy_fcgi:error] [pid 1749513:tid 128160255428288] [cl ...
show more
[Wed Jun 24 22:00:03.962207 2026] [proxy_fcgi:error] [pid 1749513:tid 128160280606400] [client 185.192.69.80:36523] AH01071: Got error 'Primary script unknown'
[Wed Jun 24 22:00:05.714958 2026] [proxy_fcgi:error] [pid 1749513:tid 128160255428288] [client 185.192.69.80:36523] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-22 08:08:08
UTC ·
(4 months ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-06-05 16:05:31
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇿🇦
Tokolosh Hunters
2026-05-24 05:17:06
UTC ·
(5 months ago)
AutoBlockWindow-Known bad useragent query-2026-05-24 05:17:05
Bad Web Bot
🇬🇧
consul.to
2026-05-24 00:41:32
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-04-30 07:57:27
UTC ·
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
