๐ซ๐ท
โจ
2026-05-30 23:37:22
(4 days ago)
Rule : Security
IP in black list
Port Scan
Hacking
Brute-Force
๐ง๐ช
cmbplf
2026-05-30 23:08:13
(4 days ago)
2.148 requests from abuseipdb.com blacklisted IP (1yr5mos1d)
Brute-Force
Bad Web Bot
๐ฉ๐ช
NetShield-DE
2026-05-30 23:07:20
(4 days ago)
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-05-31T ...
show more
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-05-31T01:07:02+0200. Last: 2026-05-31T01:07:02+0200.
Samples:
- 2026-05-31 00:33:57,579 fail2ban.actions [1405153]: NOTICE [abuseipdb] Ban 20.205.106.92
show less
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-05-30 22:58:28
(4 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐ท๐บ
loveprod
2026-05-30 22:12:28
(4 days ago)
20.205.106.92 - - [31/May/2026:01:12:25 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 364 "-" "Mo ...
show more
20.205.106.92 - - [31/May/2026:01:12:25 +0300] "GET /autoload_classmap.php HTTP/1.1" 301 364 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.205.106.92 - - [31/May/2026:01:12:26 +0300] "GET /admin.php HTTP/1.1" 301 352 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-30 22:01:51
(4 days ago)
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.205.106.92 162.158.179.217 - - [30/May/2026:19:01:40 ...
show more
Fail2Ban ct101 Jail: tomcat-404 | Evidence: 20.205.106.92 162.158.179.217 - - [30/May/2026:19:01:40 -0300] "GET /ab.php HTTP/1.1" 404 18193
20.205.106.92 162.158.178.126 - - [30/May/2026:19:01:41 -0300] "GET /lock360.php HTTP/1.1" 404 18193
20.205.106.92 162.158.179.217 - - [30/May/2026:19:01:41 -0300] "GET /anonse/lock360.php HTTP/1.1" 404 18193
20.205.106.92 162.158.179.217 - - [30/May/2026:19:01:42 -0300] "GET /file5.php HTTP/1.1" 404 18193
20.205.106.92 162.158.179.217 - - [30/May/2026:19:01:42 -0300] "GET /sitemaps.php HTTP/1.1" 404 18193
show less
Bad Web Bot
Web App Attack
Anonymous
2026-05-30 21:44:25
(4 days ago)
Aggressive web scan
Bad Web Bot
Web App Attack
๐จ๐ฟ
ptlab
2026-05-30 20:45:30
(4 days ago)
Detected xmlrpc_brute attack from WP-host.
Hacking
Web App Attack
๐บ๐ธ
antlac1
2026-05-30 19:28:29
(4 days ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
๐ฉ๐ช
AetherFox
2026-05-30 18:45:55
(4 days ago)
AetherFox VoidGuard detected: [Sat May 30 18:45:53.669158 2026] [authz_core:error] [pid 2362282:tid ...
show more
AetherFox VoidGuard detected: [Sat May 30 18:45:53.669158 2026] [authz_core:error] [pid 2362282:tid 2362321] [client 20.205.106.92:4958] AH01630: client denied by server configuration: proxy:https://[MASKED]/a.php
[Sat May 30 18:45:54.043357 2026] [authz_core:error] [pid 2362282:tid 2362326] [client 20.205.106.92:4958] AH01630: client denied by server configuration: proxy:https://[MASKED]/aa.php
[Sat May 30 18:45:54.231260 2026] [authz_core:error] [pid 2362282:tid 2362296] [client 20.205.106.92:4958] AH01630: client denied by server configuration: proxy:https://[MASKED]/aaa.php
[Sat May 30 18:45:54.419682 2026] [authz_core:error] [pid 2362282:tid 2362295] [client 20.205.106.92:4958] AH01630: client denied by server configuration: proxy:https://[MASKED]/ab.php
[Sat May 30 18:45:54.607336 2026] [authz_core:error] [pid 2362282:tid 2362306] [client 20.205.106.92:4958] AH01630: client denied by server configuration: proxy:https://[MASKED]/lock360.php
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-05-30 17:54:56
(4 days ago)
20.205.106.92 - - [30/May/2026:14:54:56 -0300] "GET /admin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (W ...
show more
20.205.106.92 - - [30/May/2026:14:54:56 -0300] "GET /admin.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Port Scan
๐ฉ๐ช
LRob.fr
2026-05-30 17:45:06
(4 days ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฌ๐ง
consul.to
2026-05-30 17:41:19
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฆ๐บ
Anytech
2026-05-30 16:11:59
(4 days ago)
Blocked by Conn-Monitor
Hacking
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-05-30 16:00:46
(4 days ago)
[Sat May 30 17:00:44.878823 2026] [proxy_fcgi:error] [pid 236222:tid 139774174148160] [client 20.205 ...
show more
[Sat May 30 17:00:44.878823 2026] [proxy_fcgi:error] [pid 236222:tid 139774174148160] [client 20.205.106.92:2672] AH01071: Got error 'Primary script unknown'
[Sat May 30 17:00:45.091067 2026] [proxy_fcgi:error] [pid 236222:tid 139773628884544] [client 20.205.106.92:2672] AH01071: Got error 'Primary script unknown'
[Sat May 30 17:00:45.303768 2026] [proxy_fcgi:error] [pid 236222:tid 139774182540864] [client 20.205.106.92:2672] AH01071: Got error 'Primary script unknown'
[Sat May 30 17:00:45.516467 2026] [proxy_fcgi:error] [pid 236222:tid 139775050794560] [client 20.205.106.92:2672] AH01071: Got error 'Primary script unknown'
[Sat May 30 17:00:45.728405 2026] [proxy_fcgi:error] [pid 236222:tid 139774761342528] [client 20.205.106.92:2672] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack