🇩🇪
srtzero
2026-09-04 17:24:57
(8 hours ago)
172.233.131.71 - - [04/Sep/2026:19:24:56 +0200] "GET /administrator/ HTTP/2.0" 404 1370 "-" "Mozilla ...
show more
172.233.131.71 - - [04/Sep/2026:19:24:56 +0200] "GET /administrator/ HTTP/2.0" 404 1370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:19:24:56 +0200] "GET /administrator/manifests/files/joomla.xml HTTP/2.0" 404 1370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:19:24:57 +0200] "HEAD /wp-login.php HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
KP_Security
2026-09-04 17:20:29
(8 hours ago)
Automated web application attack detected. Rules: DET-WP-LOGIN, DET-WP-ADMIN, DET-WP-INCLUDES. Evide ...
show more
Automated web application attack detected. Rules: DET-WP-LOGIN, DET-WP-ADMIN, DET-WP-INCLUDES. Evidence: 100.
show less
Web App Attack
🇸🇬
anotherwatcher
2026-09-04 16:42:46
(8 hours ago)
bad bot
Bad Web Bot
🇫🇷
/dev/null
2026-09-04 16:38:05
(8 hours ago)
Web attack | malicious scanning detected.
Hacking
Web App Attack
🇩🇪
MarkGGN
2026-09-04 16:25:25
(9 hours ago)
Web attack. 172.233.131.71 - - [04/Sep/2026:18:25:24 +0200] "GET /administrator/ HTTP/2.0" 404 131 " ...
show more
Web attack. 172.233.131.71 - - [04/Sep/2026:18:25:24 +0200] "GET /administrator/ HTTP/2.0" 404 131 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:18:25:24 +0200] "GET /administrator/ HTTP/2.0" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Web App Attack
🇨🇦
Sakusen
2026-09-04 16:19:23
(9 hours ago)
Automated web attack: 16 reqs, 10 paths probed, 9 returned 404; probed: 7 other, 1 .php, 1 .xml, 1 a ...
show more
Automated web attack: 16 reqs, 10 paths probed, 9 returned 404; probed: 7 other, 1 .php, 1 .xml, 1 admin
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-09-04 15:48:40
(9 hours ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇳🇱
middelkoopcc
2026-09-04 15:43:01
(9 hours ago)
2026-09-04 17:41:48 AH01071: Got error 'Primary script unknown', referer https://w2u.nl/administrato ...
show more
2026-09-04 17:41:48 AH01071: Got error 'Primary script unknown', referer https://w2u.nl/administrator/manifests/files/joomla.xml && 2026-09-04 17:41:48 AH01071: Got error 'Primary script unknown' && 2026-09-04 17:41:49 AH01071: Got error 'Primary script unknown', referer https://w2u.nl/language/en-GB/en-GB.xml && 526 more within 20 minutes
show less
Web App Attack
🇬🇧
Artelis
2026-09-04 15:41:12
(9 hours ago)
172.233.131.71 - - [04/Sep/2026:15:41:09 +0000] "GET /administrator/ HTTP/2.0" 404 167 "-" "Mozilla/ ...
show more
172.233.131.71 - - [04/Sep/2026:15:41:09 +0000] "GET /administrator/ HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:15:41:10 +0000] "GET /administrator/manifests/files/joomla.xml HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:15:41:10 +0000] "GET /language/en-GB/en-GB.xml HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:15:41:10 +0000] "GET /media/system/js/core.js HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
172.233.131.71 - - [04/Sep/2026:15:41:11 +0000] "HEAD /zzx9q7_not_exist_8123x/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
...
show less
Web App Attack
Anonymous
2026-09-04 15:39:07
(9 hours ago)
Hacking Attempt (Website Honeypot)
Hacking
Web App Attack
🇫🇷
Pays d'Angoulême
2026-09-04 12:21:46
(13 hours ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/js/wp-emoji.js
Web App Attack
🇫🇷
Sklurk
2026-09-04 12:20:57
(13 hours ago)
Web App Attack
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-04 12:08:06
(13 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
🇺🇸
infra-monitor
2026-09-04 10:00:07
(15 hours ago)
Automated ban via infra-monitor: wordpress-probe, wp-sensitive-paths
Web App Attack
🇩🇪
XYCoderXY
2026-09-04 09:20:07
(16 hours ago)
SSH/web brute-force & exploit scanning against lumerux.com (automated report).
Brute-Force
SSH