2026-10-12 00:00:00
(2 days ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
2026-10-10 15:23:45
(4 days ago)
Banned by Fail2Ban on server
Web App Attack
🇬🇧
consul.to
2026-10-09 13:08:27
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
2026-10-08 04:01:56
(6 days ago)
(wp_bot_scan) Agressieve WordPress/Admin Bot 185.92.25.88 (-): 5 in the last 3600 secs; Ports: *; Di ...
show more
(wp_bot_scan) Agressieve WordPress/Admin Bot 185.92.25.88 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 185.92.25.88 - - [08/Oct/2026:06:01:52 +0200] "GET /wp-admin/css/goods.php HTTP/1.1" 404 502 "-" "Go-http-client/1.1"
185.92.25.88 - - [08/Oct/2026:06:01:52 +0200] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 404 502 "-" "Go-http-client/1.1"
185.92.25.88 - - [08/Oct/2026:06:01:52 +0200] "GET /wp-admin/admin-ajax.php HTTP/1.1" 404 502 "-" "Go-http-client/1.1"
185.92.25.88 - - [08/Oct/2026:06:01:52 +0200] "GET /wp-admin/css/index.php HTTP/1.1" 404 502 "-" "Go-http-client/1.1"
185.92.25.88 - - [08/Oct/2026:06:01:52 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 502 "-" "Go-http-client/1.1"
show less
Port Scan
🇳🇱
Alt255
2026-10-08 03:31:27
(6 days ago)
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 185.92.25.88 - - [08/Oct/2026:05:31:07 +0200] "GET /over-onze-inwonende-24-uurs-zorg/werkgebied/000.php HTTP/2.0" 404 1338 "http://thuiszorginspanje.be/000.php" "Go-http-client/2.0"
185.92.25.88 - - [08/Oct/2026:05:31:07 +0200] "GET /over-onze-inwonende-24-uurs-zorg/werkgebied/chosen.php?p= HTTP/2.0" 404 1338 "http://thuiszorginspanje.be/chosen.php?p=" "Go-http-client/2.0"
185.92.25.88 - - [08/Oct/2026:05:31:07 +0200] "GET /over-onze-inwonende-24-uurs-zorg/werkgebied/wp-includes/hp2.php HTTP/2.0" 404 36 "http://thuiszorginspanje.be/wp-includes/hp2.php" "Go-http-client/2.0"
185.92.25.88 - - [08/Oct/2026:05:31:07 +0200] "GET /over-onze-inwonende-24-uurs-zorg/werkgebied/gifclass.php HTTP/2.0" 404 1338 "http://thuiszorginspanje.be/gifclass.php#888xyz999" "Go-http-client/2.0"
185.92.25.88 - - [
...
show less
Bad Web Bot
Web App Attack
2026-10-08 00:32:39
(6 days ago)
185.92.25.88 - - [08/Oct/2026:02:32:38 +0200] "GET / HTTP/2.0" 301 169 "http:///" "Go-http-client/2. ...
show more
185.92.25.88 - - [08/Oct/2026:02:32:38 +0200] "GET / HTTP/2.0" 301 169 "http:///" "Go-http-client/2.0"
show less
Bad Web Bot
🇦🇺
Lazarus
2026-10-06 15:56:24
(1 week ago)
HTTP probe.
Web App Attack
🇩🇪
bescared
2026-10-06 00:54:03
(1 week ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-05 17:06:39
(1 week ago)
[05/Oct/2026:20:06:38 +0300] -- 185.92.25.88 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-05 16:41:03
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇫🇮
as211431.net
2026-10-03 12:43:39
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-content/goods.php
UA: Go-http-client/1.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
SX Communications
2026-10-03 12:07:48
(1 week ago)
HTTP application-layer DoS / botnet traffic from 185.92.25.88: repeated high-cost dynamic page and f ...
show more
HTTP application-layer DoS / botnet traffic from 185.92.25.88: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇫🇷
arsonist
2026-10-03 09:33:33
(1 week ago)
[fail2ban]
2026-10-03T09:33:32.458564+00:00 arson caddy[1712]: {"level":"info","ts":1791020012.45851 ...
show more
[fail2ban]
2026-10-03T09:33:32.458564+00:00 arson caddy[1712]: {"level":"info","ts":1791020012.458518,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"185.92.25.88","remote_port":"49901","client_ip":"185.92.25.88","proto":"HTTP/2.0","method":"GET","host":"red.furtress.tf","uri":"/wp-admin/css/goods.php","headers":{"Referer":["http://red.furtress.tf/wp-admin/css/goods.php"],"Accept-Encoding":["gzip"],"User-Agent":["Go-http-client/2.0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"red.furtress.tf","ech":false}},"bytes_read":0,"user_id":"","duration":0.000109045,"size":7,"status":418,"resp_headers":{"Content-Type":["text/plain; charset=utf-8"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
...
show less
Bad Web Bot
🇺🇸
Starburst SysOp Team
2026-10-02 18:34:44
(1 week ago)
Scanner User-Agent. Pattern match "(?i)(sqlmap|nikto|nmap|masscan|zgrab|curl/|python-requests|Go-htt ...
show more
Scanner User-Agent. Pattern match "(?i)(sqlmap|nikto|nmap|masscan|zgrab|curl/|python-requests|Go-http-client|libwww-perl)" at REQUEST_HEADERS:User-Agent. (100009-mnz6-1)
show less
Hacking
🇳🇱
WeCloudit-Anti-Abuse
2026-09-30 14:12:03
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
