Anonymous
2026-01-12 15:01:31
UTC ·
(10 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-01-12 12:27:33
UTC ·
(10 months ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking
Brute-Force
🇨🇳
ThreatBook.io
2026-01-12 00:34:09
UTC ·
(10 months ago)
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/68.218.9.208
2026-01-11 22:57:46 /randkeyword.php
2026-01-11 22:57:44 /zwso.php
2026-01-11 22:57:45 /class19.php
2026-01-11 22:57:44 /wp-admin/css/colors/blue/index.php
202 ...
show more
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/68.218.9.208
2026-01-11 22:57:46 /randkeyword.php
2026-01-11 22:57:44 /zwso.php
2026-01-11 22:57:45 /class19.php
2026-01-11 22:57:44 /wp-admin/css/colors/blue/index.php
2026-01-11 22:57:45 /class20.php
2026-01-11 22:57:43 /wp-content/plugins/hellopress/wp_filemanager.php
2026-01-11 22:57:44 /class-t.api.php
2026-01-11 22:57:46 /fwe.php
show less
Web App Attack
🇮🇹
mgarofano80
2026-01-11 16:53:57
UTC ·
(10 months ago)
Brute-Force
Web App Attack
🇫🇷
mrcrassi
2026-01-11 16:50:22
UTC ·
(10 months ago)
Triggered Cloudflare WAF (botFight) from AU.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /nox.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇸🇪
Lemmy
2026-01-11 16:50:14
UTC ·
(10 months ago)
apache-noscript
Web App Attack
🇩🇪
BlueWire Hosting
2026-01-11 16:30:50
UTC ·
(10 months ago)
Suspicious HTTP(s) activity without a user agent provided
Bad Web Bot
🇺🇸
ambor
2026-01-11 16:22:11
UTC ·
(10 months ago)
Honeypot access: PHP file scan attempt: /.well-known/index.php. Path: /.well-known/index.php
Web App Attack
🇺🇦
URAN Publishing Service
2026-01-11 16:19:18
UTC ·
(10 months ago)
68.218.9.208 - - [11/Jan/2026:18:18:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 278 "-" "-"
68.218.9.208 - - [11/Jan/2026:18:19:18 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 196 "-" "-"
...
Web App Attack
🇩🇪
paissangroup
2026-01-11 16:18:52
UTC ·
(10 months ago)
Multiple WAF Violations
Web App Attack
🇮🇩
Burayot
2026-01-11 16:09:07
UTC ·
(10 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 68.218.9.208 (AU/Australia/-): 2 in the last 3600 secs
Web App Attack
🇫🇮
Christopher Hughes
2026-01-11 15:54:26
UTC ·
(10 months ago)
[Sun Jan 11 15:44:16.127319 2026] [proxy_fcgi:error] [pid 3215899:tid 140345622910528] [client 68.218.9.208:24222] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:54:25.181249 2026] [proxy_fcgi:error] [pid 3205550:tid 140345052468800] [cli ...
show more
[Sun Jan 11 15:44:16.127319 2026] [proxy_fcgi:error] [pid 3215899:tid 140345622910528] [client 68.218.9.208:24222] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:54:25.181249 2026] [proxy_fcgi:error] [pid 3205550:tid 140345052468800] [client 68.218.9.208:28716] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:54:25.481522 2026] [proxy_fcgi:error] [pid 3205550:tid 140346134603328] [client 68.218.9.208:28716] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:54:26.371670 2026] [proxy_fcgi:error] [pid 3205550:tid 140345060861504] [client 68.218.9.208:28716] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:54:26.659364 2026] [proxy_fcgi:error] [pid 3205550:tid 140346168174144] [client 68.218.9.208:28716] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-01-11 15:47:31
UTC ·
(10 months ago)
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:46:21 +1100] "GET /admin.php HTTP/1.1" 503 861 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:02 +1100] "GET /xv.php HTTP/1.1" 404 169638 "-" "-"
stkild ...
show more
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:46:21 +1100] "GET /admin.php HTTP/1.1" 503 861 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:02 +1100] "GET /xv.php HTTP/1.1" 404 169638 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:13 +1100] "GET /x56.php HTTP/1.1" 404 166709 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:13 +1100] "GET /htaccess.php HTTP/1.1" 404 166679 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:14 +1100] "GET /readme.php HTTP/1.1" 404 166709 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:16 +1100] "GET /x50.php HTTP/1.1" 404 166709 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:17 +1100] "GET /fv.php HTTP/1.1" 404 166709 "-" "-"
stkildashule.paulshipley.info:443 68.218.9.208 - - [12/Jan/2026:02:47:18 +1100] "GET /file.php? HTTP/1.1" 404 166709 "-" "-"
stkildash
...
show less
Web App Attack
Anonymous
2026-01-11 15:40:12
UTC ·
(10 months ago)
$f2bV_matches
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-01-11 15:34:14
UTC ·
(10 months ago)
[Sun Jan 11 15:34:12.789012 2026] [proxy_fcgi:error] [pid 3205550:tid 140344557561408] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:34:13.076312 2026] [proxy_fcgi:error] [pid 3205550:tid 140345639695936] [cli ...
show more
[Sun Jan 11 15:34:12.789012 2026] [proxy_fcgi:error] [pid 3205550:tid 140344557561408] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:34:13.076312 2026] [proxy_fcgi:error] [pid 3205550:tid 140345639695936] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:34:13.668858 2026] [proxy_fcgi:error] [pid 3205550:tid 140346258732608] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:34:13.942354 2026] [proxy_fcgi:error] [pid 3205550:tid 140345094432320] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
[Sun Jan 11 15:34:14.228740 2026] [proxy_fcgi:error] [pid 3205550:tid 140345606125120] [client 68.218.9.208:24690] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack