๐ณ๐ฑ
Alt255
2026-10-20 14:31:14
(47 minutes ago)
[ti-02ra] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-02ra] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 185.194.178.89 - - [20/Oct/2026:16:30:33 +0200] "GET /wp-includes/item.php HTTP/1.1" 404 566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.194.178.89 - - [20/Oct/2026:16:30:34 +0200] "GET /assets/index.php HTTP/1.1" 404 566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.194.178.89 - - [20/Oct/2026:16:30:34 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 566 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
185.194.178.89 - - [20/Oct/2026:16:30:35 +0200] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 13:04:50
(2 hours ago)
185.194.178.89 - - [20/Oct/2026:15:04:45 +0200] "GET /update/ HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Wi ...
show more
185.194.178.89 - - [20/Oct/2026:15:04:45 +0200] "GET /update/ HTTP/1.1" 404 164 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
185.194.178.89 - - [20/Oct/2026:15:04:45 +0200] "GET /wp-content/ HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
185.194.178.89 - - [20/Oct/2026:15:04:45 +0200] "GET /wp-admin/maint/ HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
185.194.178.89 - - [20/Oct/2026:15:04:45 +0200] "GET /themes/zMousse/ HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
185.194.178.89 - - [20/Oct/2026:15:04:46 +0200] "GET /wp-content/plugins/ubh/ HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-20 10:04:11
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /lock360.php
UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ฎ
kumiko
2026-10-20 08:01:04
(7 hours ago)
[2026-10-20 11:01:03] User-Agent Spoofing (6 unique User-Agent strings from the same IP address with ...
show more
[2026-10-20 11:01:03] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 1 seconds)
show less
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-20 07:39:21
(7 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
IVski.com
2026-10-20 03:05:04
(12 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-19 09:54:06
(1 day ago)
185.194.178.89 - - [19/Oct/2026:11:51:21 +0200] "GET /.well-known/pki-validation/mariju.php HTTP/1.1 ...
show more
185.194.178.89 - - [19/Oct/2026:11:51:21 +0200] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 404 549 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.194.178.89 - - [19/Oct/2026:11:51:27 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
185.194.178.89 - - [19/Oct/2026:11:51:39 +0200] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
185.194.178.89 - - [19/Oct/2026:11:52:06 +0200] "GET /file5.php HTTP/1.1" 404 475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
185.194.178.89 - - [19/Oct/2026:11:52:06 +0200] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 404 486 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.194.178.89 - - [19/Oct/2026:11:52:06
...
show less
DDoS Attack
๐ณ๐ฑ
Site.eu
2026-10-19 04:18:38
(1 day ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-19 03:11:59
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FR, Attack patterns: WordPress scanning, Backup file probing
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 00:50:15
(1 day ago)
/cgi-bin probe
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-18 22:54:42
(1 day ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 185.194.178.89 - - [19/Oct/2026:00:54:41 +0200] "GET /alfa.php HTTP/1.1" 301 451 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
nzhost.co.nz
2026-10-18 21:31:30
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
๐ฌ๐ง
consul.to
2026-10-18 17:21:38
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-18 16:28:31
(1 day ago)
Excessive 404/403 errors
Brute-Force
๐ธ๐ช
vaia.cloud
2026-10-18 16:15:02
(1 day ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack