Anonymous
2026-10-20 20:10:16
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing
show less
Bad Web Bot
Web App Attack
π§π·
ICS Labs
2026-10-20 16:51:01
(3 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.
Brute-Force
π³π±
Alt255
2026-10-20 09:23:23
(4 days ago)
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 188.166.118.132 - - [20/Oct/2026:11:23:07 +0200] "HEAD /shop/ HTTP/2.0" 404 227 "http://www.ocarotterdam.nl/shop/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
188.166.118.132 - - [20/Oct/2026:11:23:08 +0200] "HEAD /press/ HTTP/2.0" 404 40 "http://www.ocarotterdam.nl/press/" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36"
188.166.118.132 - - [20/Oct/2026:11:23:08 +0200] "HEAD /content/ HTTP/2.0" 404 17 "http://www.ocarotterdam.nl/content/" "Mozilla/5.0 (Linux; Android 14; RMX3842) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.44 Mobile Safari/537.36"
cureplus
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 09:19:58
(4 days ago)
188.166.118.132 patrz.eu - [20/Oct/2026:11:19:57 +0200] "HEAD /old/ HTTP/2.0" 204 0 "http://www.patr ...
show more
188.166.118.132 patrz.eu - [20/Oct/2026:11:19:57 +0200] "HEAD /old/ HTTP/2.0" 204 0 "http://www.patrz.eu/old/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36"
...
show less
Hacking
Web App Attack
π΅π±
nfsec.pl
2026-10-20 09:06:06
(4 days ago)
188.166.118.132 - - [20/Oct/2026:09:06:05 +0000] "HEAD /shop/ HTTP/2.0" 404 661 "http://www.nfsec.pl ...
show more
188.166.118.132 - - [20/Oct/2026:09:06:05 +0000] "HEAD /shop/ HTTP/2.0" 404 661 "http://www.nfsec.pl/shop/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120"
188.166.118.132 - - [20/Oct/2026:09:06:05 +0000] "HEAD /fr/ HTTP/2.0" 404 26 "http://www.nfsec.pl/fr/" "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36"
188.166.118.132 - - [20/Oct/2026:09:06:06 +0000] "HEAD /press/ HTTP/2.0" 404 49 "http://www.nfsec.pl/press/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
188.166.118.132 - - [20/Oct/2026:09:06:06 +0000] "HEAD /content/ HTTP/2.0" 404 26 "http://www.nfsec.pl/content/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36"
188.166.118.132 - - [20/Oct/2026:09:06:06 +0000] "HEAD /old/ HTTP/2.0" 404 26 "http://www.nfsec.pl/
...
show less
Web App Attack
Exploited Host
π«π·
regishoussin
2026-10-20 09:02:37
(4 days ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-20 09:02 UTC.
show less
Bad Web Bot
Web App Attack
π©πͺ
SΓ©fora Srl
2026-10-20 08:00:27
(4 days ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
π¬π§
consul.to
2026-10-20 06:56:14
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
π¨π¦
polycoda
2026-10-20 06:46:33
(4 days ago)
AutoBlock: π― Vulnerability Scanner (Non Decay-Based) - π Directory Listings (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
π§πͺ
taivas.nl
2026-10-20 06:32:14
(4 days ago)
Site scraper
Web App Attack
π©πͺ
Lino Project
2026-10-20 05:47:51
(4 days ago)
188.166.118.132 - - [20/Oct/2026:07:47:49 +0200] "HEAD /media/ HTTP/1.1" 302 158 "-" "Mozilla/5.0 (L ...
show more
188.166.118.132 - - [20/Oct/2026:07:47:49 +0200] "HEAD /media/ HTTP/1.1" 302 158 "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
yvoictra
2026-10-20 03:55:30
(4 days ago)
Bloqueado automΓ‘ticamente por CrowdSec. Escenario: crowdsecurity/http-probing
Web App Attack
π¦πΊ
2000cn.com.au
2026-10-20 03:29:44
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
π³π±
Site.eu
2026-10-20 01:39:47
(4 days ago)
Excessive multi-domain requests
Brute-Force
π©πͺ
svr
2026-10-20 01:31:13
(4 days ago)
Abusive Automated Web Scanner
Web App Attack