🇩🇪
conseilgouz
2026-07-21 22:02:43
(19 hours ago)
sle-7 : Trying access unauthorized files/dir=>/wordpress/
Hacking
🇸🇪
SkyDancer
2026-07-21 21:10:20
(19 hours ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇩🇪
thesimonmanuel
2026-07-21 20:59:13
(20 hours ago)
2026/07/22 02:29:12 [error] 622409#622409: *88769 access forbidden by rule, client: 35.254.154.32, s ...
show more
2026/07/22 02:29:12 [error] 622409#622409: *88769 access forbidden by rule, client: 35.254.154.32, server: [redacted].com, request: "HEAD /new/ HTTP/2.0", host: "[redacted].com", referrer: "http://[redacted].com/new/"
2026/07/22 02:29:12 [error] 622409#622409: *88769 access forbidden by rule, client: 35.254.154.32, server: [redacted].com, request: "HEAD /wordpress/ HTTP/2.0", host: "[redacted].com", referrer: "http://[redacted].com/wordpress/"
2026/07/22 02:29:12 [error] 622409#622409: *88769 access forbidden by rule, client: 35.254.154.32, server: [redacted].com, request: "HEAD /old/ HTTP/2.0", host: "[redacted].com", referrer: "http://[redacted].com/old/"
show less
Port Scan
Web App Attack
🇵🇱
sefinek.net
2026-07-21 20:31:29
(20 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (HEA ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (HEAD) | Endpoint: /blog/ | UA: Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
mnsf
2026-07-21 20:05:36
(21 hours ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇩🇪
todix
2026-07-21 19:58:41
(21 hours ago)
WebAttack or semilar from 35.254.154.32
Web App Attack
🇩🇪
FeG Deutschland
2026-07-21 19:06:08
(22 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇨🇦
polycoda
2026-07-21 18:59:44
(22 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ↪️ Exces ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-07-21 18:50:37
(22 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Skyrider
2026-07-21 18:40:52
(22 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-21 17:50:05
(23 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-07-21 17:49:58
(23 hours ago)
Web vulnerability probing: /backup/ (bogus vhost/SNI)
Web App Attack
🇳🇿
Tripwire
2026-07-21 17:34:32
(23 hours ago)
Scanning for exploits - /backup/
Web App Attack
🇧🇷
Host One
2026-07-21 17:31:53
(23 hours ago)
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to d ...
show more
[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to decoy service. Original message: Web honeypot: 7 malicious requests. Attack types: wordpress_scan, generic_scan. Sample: HEAD /new/ HTTP/1.1. Attempted credentials captured.
show less
Brute-Force
Web App Attack
🇦🇺
aranguren.org
2026-07-21 17:10:17
(23 hours ago)
35.254.154.32 - - [22/Jul/2026:03:10:15 +1000] "HEAD /new/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; ...
show more
35.254.154.32 - - [22/Jul/2026:03:10:15 +1000] "HEAD /new/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36"
35.254.154.32 - - [22/Jul/2026:03:10:15 +1000] "HEAD /wordpress/ HTTP/1.1" 403 - "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1"
35.254.154.32 - - [22/Jul/2026:03:10:16 +1000] "HEAD /blog/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Nokia G42 5G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.41 Mobile Safari/537.36"
35.254.154.32 - - [22/Jul/2026:03:10:16 +1000] "HEAD /old/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
35.254.154.32 - - [22/Jul/2026:03:10:16 +1000] "HEAD /backup/ HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36"
...
show less
Bad Web Bot