🇭🇺
kranem
2026-06-01 21:00:52
(2 days ago)
Triggered Cloudflare WAF from HK.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HT ...
show more
Triggered Cloudflare WAF from HK.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-admin/maint/
Timestamp: 2026-06-01T19:46:23Z
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
🇬🇧
elleray
2026-06-01 20:58:02
(2 days ago)
Banned by Fail2Ban Server Firewall
Brute-Force
🇩🇪
FeG Deutschland
2026-06-01 20:38:23
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇹🇭
thaizone.com
2026-06-01 20:21:26
(2 days ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇬🇧
consul.to
2026-06-01 19:17:37
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
NetShield-DE
2026-06-01 19:07:21
(2 days ago)
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-01T ...
show more
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-01T21:07:01+0200. Last: 2026-06-01T21:07:01+0200.
Samples:
- 2026-05-31 00:33:57,579 fail2ban.actions [1405153]: NOTICE [abuseipdb] Ban 20.205.106.92
show less
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-01 19:07:16
(2 days ago)
(upload_shell) srv103 Shell upload 20.205.106.92 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: * ...
show more
(upload_shell) srv103 Shell upload 20.205.106.92 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-06-01 18:29:59
(2 days ago)
Aggressive web scan
Web App Attack
🇳🇱
Lentini
2026-06-01 17:39:37
(2 days ago)
visuitslagen.nl: malicious request:/.trash7206/index.php
Web App Attack
🇩🇪
raph
2026-06-01 16:58:00
(2 days ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇵🇱
alianet
2026-06-01 16:56:37
(2 days ago)
[Mon Jun 01 16:56:35.009244 2026] [proxy_fcgi:error] [pid 3520499:tid 3520536] [client 20.205.106.92 ...
show more
[Mon Jun 01 16:56:35.009244 2026] [proxy_fcgi:error] [pid 3520499:tid 3520536] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:35.210222 2026] [proxy_fcgi:error] [pid 3520499:tid 3520542] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:35.410959 2026] [proxy_fcgi:error] [pid 3520499:tid 3520551] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:35.611786 2026] [proxy_fcgi:error] [pid 3520499:tid 3520530] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:35.812613 2026] [proxy_fcgi:error] [pid 3520499:tid 3520528] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:36.013833 2026] [proxy_fcgi:error] [pid 3520499:tid 3520533] [client 20.205.106.92:3580] AH01071: Got error 'Primary script unknown'
[Mon Jun 01 16:56:36.427876 2026] [proxy_fcgi:error] [pid 3520499:tid 3520543] [client 20.205.
...
show less
Port Scan
Web App Attack
🇫🇮
danskefilm.dk
2026-06-01 16:30:01
(2 days ago)
wordpress login attempts
Web App Attack
🇱🇻
garmtech.com
2026-06-01 16:21:05
(2 days ago)
Attempted access to sensitive endpoint (/wp-content/themes/haha.php) detected. Automated scan or una ...
show more
Attempted access to sensitive endpoint (/wp-content/themes/haha.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇹🇭
thaizone.com
2026-06-01 14:54:18
(2 days ago)
Brute Force Attack on a Web Resources (repeated 404) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇩🇪
AetherFox
2026-06-01 14:50:48
(2 days ago)
AetherFox VoidGuard detected: [Mon Jun 01 14:50:47.106815 2026] [authz_core:error] [pid 2670592:tid ...
show more
AetherFox VoidGuard detected: [Mon Jun 01 14:50:47.106815 2026] [authz_core:error] [pid 2670592:tid 2670605] [client 20.205.106.92:4159] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/.trash7206/index.php
[Mon Jun 01 14:50:47.106971 2026] [authz_core:error] [pid 2670592:tid 2670605] [client 20.205.106.92:4159] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Jun 01 14:50:47.344315 2026] [authz_core:error] [pid 2670592:tid 2670616] [client 20.205.106.92:4159] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/.well-known/logs233/index.php
[Mon Jun 01 14:50:47.344701 2026] [authz_core:error] [pid 2670592:tid 2670616] [client 20.205.106.92:4159] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Mon Jun 01 14:50:47.582166 2026] [authz_core:error] [pid 2670592:tid 2670629] [client 20.2
...
show less
Bad Web Bot
Web App Attack