🇫🇷
masterguru
2026-10-03 21:08:43
(53 minutes ago)
Too much 404 requests in 1 minute. Operator GE matched 20 at IP:block_script. (46020-131)
Hacking
🇩🇪
netclix.gr
2026-10-03 19:40:23
(2 hours ago)
(aggressive_scan) Aggressive Web Exploit Scan 38.253.224.71 (ID/Indonesia/-)
Hacking
🇳🇱
Alt255
2026-10-03 17:12:55
(4 hours ago)
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 38.253.224.71 - - [03/Oct/2026:19:12:20 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.71 - - [03/Oct/2026:19:12:20 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.71 - - [03/Oct/2026:19:12:21 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.71 - - [03/Oct/2026:19:12:22 +0200] "GET /wp-admin/maint/ HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.71 - - [03/Oct/2026:19:12:28 +0200] "GET /wp-content/languages/ HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.2
...
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-03 16:14:31
(5 hours ago)
excessive HTTP 404 errors
Bad Web Bot
2026-10-03 15:45:05
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇧
sc user
2026-10-02 23:39:07
(22 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
🇫🇷
arsonist
2026-10-02 22:30:45
(23 hours ago)
[fail2ban]
2026-10-02T22:30:44.375565+00:00 arson caddy[1712]: {"level":"info","ts":1790980244.37550 ...
show more
[fail2ban]
2026-10-02T22:30:44.375565+00:00 arson caddy[1712]: {"level":"info","ts":1790980244.3755057,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"38.253.224.71","remote_port":"58021","client_ip":"38.253.224.71","proto":"HTTP/1.1","method":"GET","host":"code.arson.cloud","uri":"/wp-admin/","headers":{"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"],"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"code.arson.cloud","ech":false}},"bytes_read":0,"user_id":"","duration":0.000082846,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇫🇷
arsonist
2026-10-02 20:43:11
(1 day ago)
[fail2ban]
2026-10-02T20:43:10.605587+00:00 arson caddy[1712]: {"level":"info","ts":1790973790.60556 ...
show more
[fail2ban]
2026-10-02T20:43:10.605587+00:00 arson caddy[1712]: {"level":"info","ts":1790973790.6055624,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"38.253.224.71","remote_port":"56139","client_ip":"38.253.224.71","proto":"HTTP/1.1","method":"GET","host":"cloud.aos.lol","uri":"/wp-admin/","headers":{"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"cloud.aos.lol","ech":false}},"bytes_read":0,"user_id":"","duration":0.000055625,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇫🇷
arsonist
2026-10-02 18:30:25
(1 day ago)
[fail2ban]
2026-10-02T18:30:24.514597+00:00 arson caddy[1712]: {"level":"info","ts":1790965824.51456 ...
show more
[fail2ban]
2026-10-02T18:30:24.514597+00:00 arson caddy[1712]: {"level":"info","ts":1790965824.5145628,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"38.253.224.71","remote_port":"54088","client_ip":"38.253.224.71","proto":"HTTP/1.1","method":"GET","host":"ci.arson.gg","uri":"/wp-admin/","headers":{"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.9"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"ci.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000055875,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇦🇺
FireGuard Server
2026-10-02 15:25:09
(1 day ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80
Port Scan
Hacking
🇩🇪
pscriptos
2026-10-02 13:46:48
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
🇫🇷
arsonist
2026-10-02 09:13:52
(1 day ago)
[fail2ban]
2026-10-02T09:13:52.162278+00:00 arson caddy[1890453]: {"level":"info","ts":1790932432.16 ...
show more
[fail2ban]
2026-10-02T09:13:52.162278+00:00 arson caddy[1890453]: {"level":"info","ts":1790932432.1622534,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"38.253.224.71","remote_port":"49336","client_ip":"38.253.224.71","proto":"HTTP/1.1","method":"GET","host":"bot.arson.gg","uri":"/wp-admin/","headers":{"Accept-Encoding":["gzip, deflate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Connection":["keep-alive"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bot.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000038383,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇳🇱
Site.eu
2026-10-02 08:26:20
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇸🇬
securejdprop
2026-10-02 04:58:04
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing.
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-10-02 03:30:01
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
