๐ซ๐ท
Eldeberen
2025-09-05 10:07:02
(1 year ago)
HTTP GET on a non-existent endpoint (CMS, .env, aws.yml, ...)
Web App Attack
Anonymous
2025-08-31 19:46:57
(1 year ago)
$f2bV_matches
Brute-Force
๐ญ๐บ
DumaNet
2025-08-28 05:02:00
(1 year ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Aug 26. 10:52:46
Source IP: 104.21 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Aug 26. 10:52:46
Source IP: 104.215.52.0
Portion of the log(s):
104.215.52.0 - [26/Aug/2025:10:50:51 +0200] "GET /amphicyon.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:51 +0200] "GET /let.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:51 +0200] "GET /sx21_1.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:51 +0200] "GET /s.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:51 +0200] "GET /1.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:50 +0200] "GET /ex.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:50 +0200] "GET /g.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:50 +0200] "GET /j.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:50 +0200] "GET /classwithtostring.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:10:50:49 +0200] "GET /just2.php HTTP/1.1" 404 153 "-" "-"
show less
Web App Attack
๐ญ๐บ
DumaNet
2025-08-28 02:39:00
(1 year ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Aug 26. 02:09:52
Source IP: 104.21 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Aug 26. 02:09:52
Source IP: 104.215.52.0
Portion of the log(s):
104.215.52.0 - [26/Aug/2025:02:09:51 +0200] "GET /k.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:51 +0200] "GET /sx21_1.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:51 +0200] "GET /just2.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:51 +0200] "GET /1aa.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:50 +0200] "GET /sx21_1.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:50 +0200] "GET /pop.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:50 +0200] "GET /let.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:50 +0200] "GET /xp.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:49 +0200] "GET /php.php HTTP/1.1" 404 153 "-" "-"
104.215.52.0 - [26/Aug/2025:02:09:49 +0200] "GET /amphicyon.php HTTP/1.1" 404 153 "-" "-"
show less
Web App Attack
๐น๐ท
rtbh.com.tr
2025-08-27 20:08:28
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐ช๐ธ
Gem
2025-08-27 13:36:04
(1 year ago)
Unauthorized web scan.
Web App Attack
๐ณ๐ฑ
JCB
2025-08-27 06:37:00
(1 year ago)
104.215.52.0 - - [26/Aug/2025:18:45:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
104.215.52.0 - - [26/Aug/2025:18:45:48 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-"
104.215.52.0 - - [26/Aug/2025:18:45:48 +0300] "GET /orm.php HTTP/1.1" 404 196 "-" "-"
...
show less
Hacking
Web App Attack
Anonymous
2025-08-27 03:55:34
(1 year ago)
SuspiciousC2 Activity detected by FMBAD System 2025-08-27 06:55:34
Hacking
Bad Web Bot
Web App Attack
๐ธ๐ช
Juha Jurvanen
2025-08-27 02:37:37
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ณ๐ฑ
Site.eu
2025-08-27 01:56:40
(1 year ago)
Excessive multi-domain requests
Brute-Force
๐ง๐ช
cmbplf
2025-08-27 00:59:18
(1 year ago)
2.685 requests from abuseipdb.com blacklisted IP (4mos2w4dfromnow)
Brute-Force
Bad Web Bot
๐ฉ๐ช
Admins@FBN
2025-08-27 00:18:34
(1 year ago)
Threat Host blocked...
Port Scan
Hacking
Anonymous
2025-08-27 00:11:47
(1 year ago)
$f2bV_matches
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2025-08-27 00:06:04
(1 year ago)
Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (4002-135)
Hacking
Web App Attack
๐ง๐ช
DrLex0
2025-08-27 00:02:25
(1 year ago)
Probing for random PHP junk
104.215.52.0 80 - [27/Aug/2025:00:02:22 +0000] "GET /wp-content/plugins ...
show more
Probing for random PHP junk
104.215.52.0 80 - [27/Aug/2025:00:02:22 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:22 +0000] "GET /nx.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:23 +0000] "GET /php.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:23 +0000] "GET /sx21_1.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:24 +0000] "GET /bluejackets.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:24 +0000] "GET /file17.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:25 +0000] "GET /pop.php HTTP/1.1" 403 1169 "-" "-"
104.215.52.0 80 - [27/Aug/2025:00:02:25 +0000] "GET /nx9.php HTTP/1.1" 403 1169 "-" "-"
show less
Brute-Force
Bad Web Bot
Web App Attack