🇹🇭
thaizone.com
2026-09-04 06:05:50
(1 minute ago)
Brute Force Attack on a Web Resources (repeated 404) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇬🇧
Andrew
2026-09-04 06:00:42
(6 minutes ago)
20.205.10.93 - - [04/Sep/2026:07:00:36 +0100] "GET /autoload_classmap.php HTTP/1.1" 404 20287 "-" "M ...
show more
20.205.10.93 - - [04/Sep/2026:07:00:36 +0100] "GET /autoload_classmap.php HTTP/1.1" 404 20287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:00:38 +0100] "GET /post.php HTTP/1.1" 404 20274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:00:39 +0100] "GET /1.php HTTP/1.1" 404 18355 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:00:40 +0100] "GET /flower.php HTTP/1.1" 404 18360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:00:40 +0100] "GET /admin.php HTTP/1.1" 404 18359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/
...
show less
Hacking
Web App Attack
🇬🇧
blik2108
2026-09-04 05:47:59
(19 minutes ago)
20.205.10.93 - - [04/Sep/2026:05:47:50 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3431 "-" "Mo ...
show more
20.205.10.93 - - [04/Sep/2026:05:47:50 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
20.205.10.93 - - [04/Sep/2026:05:47:52 +0000] "GET /post.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
20.205.10.93 - - [04/Sep/2026:05:47:53 +0000] "GET /1.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
20.205.10.93 - - [04/Sep/2026:05:47:54 +0000] "GET /flower.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
20.205.10.93 - - [04/Sep/2026:05:47:54 +0000] "GET /admin.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.
...
show less
Web App Attack
🇺🇸
Epimetheus
2026-09-04 05:44:03
(23 minutes ago)
Unauthorized access attempts:
[GET] /2.php
[GET] /configs.php
[GET] /plugin.php
[GET] /inputs.php
[ ...
show more
Unauthorized access attempts:
[GET] /2.php
[GET] /configs.php
[GET] /plugin.php
[GET] /inputs.php
[GET] /config.php7
[GET] /colour.php
[GET] /alfanew.php7
[GET] /locale.php
[GET] /hehe.php
[GET] /flower.php
[GET] /1.php
[GET] /post.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Web App Attack
🇩🇪
london2038.com
2026-09-04 05:41:15
(26 minutes ago)
Too many failed requests
20.205.10.93 - - [04/Sep/2026:07:40:58 +0200] "GET /autoload_classmap.php H ...
show more
Too many failed requests
20.205.10.93 - - [04/Sep/2026:07:40:58 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 40040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:40:59 +0200] "GET /post.php HTTP/1.1" 404 40041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:41:00 +0200] "GET /flower.php HTTP/1.1" 404 40041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:41:01 +0200] "GET /admin.php HTTP/1.1" 404 40041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.10.93 - - [04/Sep/2026:07:41:01 +0200] "GET /file.php HTTP/1.1" 404 40041 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0
...
show less
Web Spam
Bad Web Bot
🇬🇧
openstrike.co.uk
2026-09-04 05:14:29
(52 minutes ago)
49 attacks on PHP URLs:
GET /wp-contentt.php HTTP/1.1
Web App Attack
🇩🇪
Skyrider
2026-09-04 05:11:36
(55 minutes ago)
crowdsecurity/http-probing
Web App Attack
🇺🇸
deskpass.com
2026-09-04 05:08:13
(59 minutes ago)
GET /room.php
Web App Attack
🇺🇸
chrisj
2026-09-04 04:55:09
(1 hour ago)
[Fri Sep 04 04:55:05.596009 2026] [proxy_fcgi:error] [pid 1674655:tid 1674740] [client 20.205.10.93: ...
show more
[Fri Sep 04 04:55:05.596009 2026] [proxy_fcgi:error] [pid 1674655:tid 1674740] [client 20.205.10.93:1422] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 04:55:07.350561 2026] [proxy_fcgi:error] [pid 1674655:tid 1674737] [client 20.205.10.93:1422] AH01071: Got error 'Primary script unknown'
[Fri Sep 04 04:55:09.102624 2026] [proxy_fcgi:error] [pid 1674655:tid 1674717] [client 20.205.10.93:1422] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇪🇸
elcruzado.es
2026-09-04 04:47:01
(1 hour ago)
(webshell-scan) Webshell scanner detected (AH01071) from 20.205.10.93 (HK/Hong Kong/-)
Hacking
🇩🇪
hidemail.app
2026-09-04 04:38:57
(1 hour ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ...
show more
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
show less
Web App Attack
Hacking
🇺🇸
Mehmet_The_Script_Kiddie
2026-09-04 04:19:56
(1 hour ago)
CloudFlare WAF REPORT: /autoload_classmap.php
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-04 04:18:50
(1 hour ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
roxyapi
2026-09-04 04:10:13
(1 hour ago)
Honeypot: automated vulnerability scan / web app attack. Last probe: GET /1.php
Web App Attack
Bad Web Bot
🇫🇮
as211431.net
2026-09-04 04:05:52
(2 hours ago)
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from HK.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /post.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot