Anonymous
2026-06-28 16:30:54
(28 seconds ago)
20.219.8.52 detected on srv01
Brute-Force
๐ฉ๐ช
cloudmax
2026-06-28 16:23:50
(7 minutes ago)
Cloudmax Protect [WEB BLOCK] - Too many 400/500 requests. Possible attack or hacking attempt
Hacking
Web App Attack
๐ฌ๐ง
Greg Poulson
2026-06-28 16:15:05
(16 minutes ago)
Our website was hit by this DDOS at a rate of 150 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
๐ฉ๐ช
Nevermind
2026-06-28 16:00:36
(30 minutes ago)
20.219.8.52 - - [28/Jun/2026:18:00:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.219.8.52 - - [28/Jun/2026:18:00:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 808 "-" "-"
20.219.8.52 - - [28/Jun/2026:18:00:34 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 808 "-" "-"
20.219.8.52 - - [28/Jun/2026:18:00:35 +0200] "GET /xyn.php HTTP/1.1" 404 808 "-" "-"
20.219.8.52 - - [28/Jun/2026:18:00:35 +0200] "GET /5.php HTTP/1.1" 404 808 "-" "-"
...
show less
Web App Attack
๐บ๐ธ
chrisj
2026-06-28 16:00:28
(30 minutes ago)
[Sun Jun 28 15:50:13.011778 2026] [proxy_fcgi:error] [pid 375597:tid 375673] [client 20.219.8.52:289 ...
show more
[Sun Jun 28 15:50:13.011778 2026] [proxy_fcgi:error] [pid 375597:tid 375673] [client 20.219.8.52:28903] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 16:00:27.567044 2026] [proxy_fcgi:error] [pid 375597:tid 375680] [client 20.219.8.52:33196] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 16:00:27.967112 2026] [proxy_fcgi:error] [pid 375597:tid 375650] [client 20.219.8.52:33196] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
๐ซ๐ฎ
as211431.net
2026-06-28 15:57:51
(33 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from IN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from IN.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //cgi-bin/admin.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
Hans Wurst
2026-06-28 15:56:34
(34 minutes ago)
Web-Attack 403. Details: 20.219.8.52 - - [28/Jun/2026:17:56:33 +0200] "GET /this_is_a_new_hello_worl ...
show more
Web-Attack 403. Details: 20.219.8.52 - - [28/Jun/2026:17:56:33 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 486 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:56:33 +0200] "GET /xyn.php HTTP/1.1" 403 486 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:56:33 +0200] "GET /5.php HTTP/1.1" 403 486 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:56:33 +0200] "GET /joomla.php HTTP/1.1" 403 486 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:56:34 +0200] "GET /w.php HTTP/1.1" 403 486 "-" "-"
show less
Web App Attack
๐ฆ๐บ
Anytech
2026-06-28 15:53:27
(37 minutes ago)
Blocked by Conn-Monitor: Web scanning activity
Hacking
Web App Attack
๐ซ๐ท
Bruno
2026-06-28 15:51:37
(39 minutes ago)
20.219.8.52 - - [28/Jun/2026:17:51:12 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 406 "-" ...
show more
20.219.8.52 - - [28/Jun/2026:17:51:12 +0200] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:13 +0200] "GET /wp-includes/Text/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:14 +0200] "GET /wp-content/uploads/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:30 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:31 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:33 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:34 +0200] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:35 +0200] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:35 +0200] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 406 "-" "-"
20.219.8.52 - - [28/Jun/2026:17:51:36 +0200] "GET /wp-includes/blocks/buttons/ HTTP/1.1" 403 4
...
show less
Web App Attack
๐ฉ๐ช
zumbo.net
2026-06-28 15:49:47
(41 minutes ago)
[Sun Jun 28 18:49:45.230907 2026] [proxy_fcgi:error] [pid 2986371:tid 2986380] [client 20.219.8.52:0 ...
show more
[Sun Jun 28 18:49:45.230907 2026] [proxy_fcgi:error] [pid 2986371:tid 2986380] [client 20.219.8.52:0] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 18:49:45.715078 2026] [proxy_fcgi:error] [pid 2986371:tid 2986386] [client 20.219.8.52:0] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 18:49:45.974549 2026] [proxy_fcgi:error] [pid 2986372:tid 2986387] [client 20.219.8.52:0] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 18:49:46.290664 2026] [proxy_fcgi:error] [pid 2986371:tid 2986376] [client 20.219.8.52:0] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 18:49:46.586255 2026] [proxy_fcgi:error] [pid 2986372:tid 2986402] [client 20.219.8.52:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
chrisj
2026-06-28 15:40:05
(51 minutes ago)
[Sun Jun 28 15:40:04.794831 2026] [proxy_fcgi:error] [pid 375597:tid 375673] [client 20.219.8.52:364 ...
show more
[Sun Jun 28 15:40:04.794831 2026] [proxy_fcgi:error] [pid 375597:tid 375673] [client 20.219.8.52:36454] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 15:40:05.212065 2026] [proxy_fcgi:error] [pid 375597:tid 375654] [client 20.219.8.52:36454] AH01071: Got error 'Primary script unknown'
[Sun Jun 28 15:40:05.624671 2026] [proxy_fcgi:error] [pid 375597:tid 375678] [client 20.219.8.52:36454] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
๐บ๐ธ
ambor
2026-06-28 15:37:12
(54 minutes ago)
Honeypot triggered: /wp-content/plugins/hellopress/wp_filemanager.php on ifebridge.com. User-Agent: ...
show more
Honeypot triggered: /wp-content/plugins/hellopress/wp_filemanager.php on ifebridge.com. User-Agent: unknown. Method: GET
show less
Web App Attack
๐บ๐ธ
cwytech
2026-06-28 15:32:39
(58 minutes ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-06-28 15:30:07
(1 hour ago)
dlcarterauthor.com:443 20.219.8.52 - - [29/Jun/2026:01:30:05 +1000] "GET /edit.php HTTP/1.1" 404 675 ...
show more
dlcarterauthor.com:443 20.219.8.52 - - [29/Jun/2026:01:30:05 +1000] "GET /edit.php HTTP/1.1" 404 67505 "-" "-"
...
show less
Web App Attack
Anonymous
2026-06-28 15:24:32
(1 hour ago)
(PERMBLOCK) 20.219.8.52 (IN/India/-) has had more than 4 temp blocks in the last 86400 secs; Ports: ...
show more
(PERMBLOCK) 20.219.8.52 (IN/India/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan