🇩🇪
london2038.com
2026-11-07 04:36:16
UTC ·
(3 minutes ago)
Probing for exploits
102.133.162.110 - - [07/Nov/2026:05:36:11 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-"
102.133.162.110 - - [07/Nov/2026:05:36:12 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager ...
show more
Probing for exploits
102.133.162.110 - - [07/Nov/2026:05:36:11 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 169 "-" "-"
102.133.162.110 - - [07/Nov/2026:05:36:12 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 0 "-" "-"
show less
Hacking
Web App Attack
🇫🇷
kie
2026-11-07 04:34:02
UTC ·
(5 minutes ago)
07-11-2026:04:32:22UTC [Nginx Web Server] Suspicious web request: path:/wp-login path:/admin.php (5 request(s)).
Bad Web Bot
Web App Attack
🇬🇧
Greg Poulson
2026-11-07 04:28:46
UTC ·
(10 minutes ago)
Our website was hit by this DDOS at a rate of 66 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇩🇪
crypto i trust, hold i must
2026-11-07 04:28:12
UTC ·
(11 minutes ago)
Web scanner path: /wp-content/plugins/hellopress/wp_filemanager.php
Web App Attack
🇩🇪
TheDjRider
2026-11-07 04:27:35
UTC ·
(12 minutes ago)
CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-11-07T04:26:58.611852002Z. Context: http_status=404
Web App Attack
🇳🇱
jetron
2026-11-07 04:26:13
UTC ·
(13 minutes ago)
MailCleaner web server observed automated probing: 32 suspicious HTTP requests out of 234, 18 distinct paths. Pattern families: admin_scan,wp.
Web App Attack
🇳🇱
thedreamer.nl
2026-11-07 04:25:54
UTC ·
(13 minutes ago)
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /this_is_a_new_hello_wo ...
show more
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /core.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /footer.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:50 +0100] "GET /header.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:51 +0100] "GET /functions.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
102.133.162.110 - - [07/Nov/2026:05:22:51 +0100] "GET /main.php HTTP/1.1" 403 146 "-" "-" "ZA" "Johannesburg" "-26.23090" "28.05830"
...
show less
Brute-Force
Bad Web Bot
🇺🇸
monn45888
2026-11-07 04:23:31
UTC ·
(16 minutes ago)
$f2bV_matches
Web App Attack
🇺🇸
CBJ
2026-11-07 04:21:23
UTC ·
(18 minutes ago)
fail2ban: apache-random-recon
...
Web App Attack
Anonymous
2026-11-07 04:16:58
UTC ·
(22 minutes ago)
Attempt to scan vulnerabilities
Hacking
🇩🇪
NewGastroline
2026-11-07 04:12:21
UTC ·
(27 minutes ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 04:11:39
UTC ·
(28 minutes ago)
[Sat Nov 07 05:11:36.129723 2026] [proxy_fcgi:error] [pid 34028:tid 34059] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
[Sat Nov 07 05:11:36.486883 2026] [proxy_fcgi:error] [pid 34028:tid 34058] [client 102.133.162.110:89 ...
show more
[Sat Nov 07 05:11:36.129723 2026] [proxy_fcgi:error] [pid 34028:tid 34059] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
[Sat Nov 07 05:11:36.486883 2026] [proxy_fcgi:error] [pid 34028:tid 34058] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
[Sat Nov 07 05:11:36.842841 2026] [proxy_fcgi:error] [pid 34028:tid 34075] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
[Sat Nov 07 05:11:37.196345 2026] [proxy_fcgi:error] [pid 34028:tid 34070] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
[Sat Nov 07 05:11:37.548262 2026] [proxy_fcgi:error] [pid 34028:tid 34056] [client 102.133.162.110:8928] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇺🇸
nasset
2026-11-07 04:06:56
UTC ·
(32 minutes ago)
102.133.162.110 - - [06/Nov/2026:20:06:53 -0800] "GET /xjore1.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133.162.110 - - [06/Nov/2026:20:06:54 -0800] "GET /css.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133 ...
show more
102.133.162.110 - - [06/Nov/2026:20:06:53 -0800] "GET /xjore1.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133.162.110 - - [06/Nov/2026:20:06:54 -0800] "GET /css.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133.162.110 - - [06/Nov/2026:20:06:54 -0800] "GET /BH.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133.162.110 - - [06/Nov/2026:20:06:55 -0800] "GET /fix.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
102.133.162.110 - - [06/Nov/2026:20:06:55 -0800] "GET /zlitozxw.php HTTP/1.1" 403 584 "-" "-" TLSv1.3 TLS_AES_256_GCM_SHA384
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 04:05:54
UTC ·
(33 minutes ago)
$f2bV_matches
Brute-Force
🇫🇷
masterguru
2026-11-07 04:03:28
UTC ·
(36 minutes ago)
Too much 404 requests in 1 minute. 403, (46020-180)
Hacking