Anonymous
2026-10-19 07:37:19
(11 hours ago)
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.68.210.160 - - [19/Oct/2026:07:37:16 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [19/Oct/2026:07:37:16 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [19/Oct/2026:07:37:18 +0000] "GET /.env.development HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [19/Oct/2026:07:37:18 +0000] "GET /.env.test HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [19/Oct/2026:07:37:19 +0000] "GET /.env.remote HTTP/1.1"
show less
Port Scan
๐บ๐ธ
chrisj
2026-10-16 17:01:41
(3 days ago)
[Fri Oct 16 17:01:40.927587 2026] [proxy_fcgi:error] [pid 395142:tid 395186] [remote 172.68.210.160: ...
show more
[Fri Oct 16 17:01:40.927587 2026] [proxy_fcgi:error] [pid 395142:tid 395186] [remote 172.68.210.160:10826] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 17:01:41.183030 2026] [proxy_fcgi:error] [pid 395142:tid 395160] [remote 172.68.210.160:10826] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 17:01:41.465047 2026] [proxy_fcgi:error] [pid 395142:tid 395162] [remote 172.68.210.160:10826] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Anonymous
2026-10-16 15:08:37
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
Anonymous
2026-10-16 09:34:17
(3 days ago)
172.68.210.160 - - [16/Oct/2026:11:34:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
172.68.210.160 - - [16/Oct/2026:11:34:11 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:11 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:11 +0200] "GET /app.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:12 +0200] "GET /bootstrap.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:12 +0200] "GET /core.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:12 +0200] "GET /global.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:13 +0200] "GET /header.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:13 +0200] "GET /functions.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:13 +0200] "GET /init.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34:13 +0200] "GET /lib.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [16/Oct/2026:11:34
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-14 20:54:39
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ซ๐ท
Nicos
2026-10-14 18:58:12
(4 days ago)
2026-10-14T20:58:11.461574+02:00 PhoenixNas e997b321c56e[1491]: {"auth_via": "unauthenticated", "dom ...
show more
2026-10-14T20:58:11.461574+02:00 PhoenixNas e997b321c56e[1491]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/.env", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14443, "remote": "172.68.210.160", "request_id": "1c5d2259330348cf9e009a4a3a22aab0", "runtime": 90, "schema_name": "public", "scheme": "https", "status": 404, "timestamp": "2026-10-14T18:58:11.461445", "user": "", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"}
2026-10-14T20:58:11.462165+02:00 PhoenixNas e997b321c56e[1491]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/demo", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 14443, "remote": "172.68.210.160", "request_id": "9897dcf43b224ab4beed1c60bd186731", "runtime": 79, "schema_name": "public", "scheme": "https", "status": 404, "timesta
...
show less
Hacking
Brute-Force
Anonymous
2026-10-13 22:17:09
(5 days ago)
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.68.210.160 - - [13/Oct/2026:22:16:54 +0000] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [13/Oct/2026:22:16:58 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [13/Oct/2026:22:16:59 +0000] "GET //wp-admin/js/index.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [13/Oct/2026:22:17:04 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [13/Oct/2026:22:17:05 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1"
show less
Port Scan
๐ฉ๐ช
www.mammazone.it
2026-10-12 23:47:00
(6 days ago)
[Tue Oct 13 01:46:58.908893 2026] [proxy_fcgi:error] [pid 24010] [client 172.68.210.160:9246] AH0107 ...
show more
[Tue Oct 13 01:46:58.908893 2026] [proxy_fcgi:error] [pid 24010] [client 172.68.210.160:9246] AH01071: Got error 'Primary script unknown'
[Tue Oct 13 01:47:00.184071 2026] [proxy_fcgi:error] [pid 24010] [client 172.68.210.160:9246] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Anonymous
2026-10-12 22:36:09
(6 days ago)
172.68.210.160 - - [13/Oct/2026:00:36:03 +0200] "GET /wp-includes/js/tinymce/plugins/compat3x/css.ph ...
show more
172.68.210.160 - - [13/Oct/2026:00:36:03 +0200] "GET /wp-includes/js/tinymce/plugins/compat3x/css.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:03 +0200] "GET /v.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:03 +0200] "GET /main.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:04 +0200] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:04 +0200] "GET /wp-content/file.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:04 +0200] "GET /wp-signup.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:04 +0200] "GET /ge.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:05 +0200] "GET /public/makeasmtp.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:05 +0200] "GET /wp-includes/customize/index.php HTTP/1.1" 404 124 "-" "-"
172.68.210.160 - - [13/Oct/2026:00:36:05 +0200] "GET /mar.php HTTP/1.1" 404 124 "-" "-
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
www.mammazone.it
2026-10-05 14:38:04
(2 weeks ago)
[Mon Oct 05 16:38:03.283191 2026] [proxy_fcgi:error] [pid 3541606] [client 172.68.210.160:13515] AH0 ...
show more
[Mon Oct 05 16:38:03.283191 2026] [proxy_fcgi:error] [pid 3541606] [client 172.68.210.160:13515] AH01071: Got error 'Primary script unknown'
[Mon Oct 05 16:38:03.932822 2026] [proxy_fcgi:error] [pid 3541606] [client 172.68.210.160:13515] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
๐น๐ท
ScchutzZ
2026-10-05 08:05:05
(2 weeks ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
Anonymous
2026-10-02 15:00:05
(2 weeks ago)
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 172.68.210.160 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.68.210.160 - - [02/Oct/2026:14:59:58 +0000] "GET /wp-admin/js/felnggg.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [02/Oct/2026:14:59:59 +0000] "GET /wp-admin/includes/aaaa.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [02/Oct/2026:15:00:00 +0000] "GET /wp-admin/css/1b2f09eda1ea40.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [02/Oct/2026:15:00:01 +0000] "GET /wp-admin/css/colors/yhnujm.php HTTP/1.1"
[REDACTED] 200 2627 172.68.210.160 - - [02/Oct/2026:15:00:02 +0000] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1"
show less
Port Scan
Anonymous
2026-10-01 09:40:42
(2 weeks ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
Anonymous
2026-10-01 08:51:49
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-29 11:15:33
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking