🇫🇷
sthoyer.de
2026-07-28 06:10:26
(4 minutes ago)
20.104.18.253 - - [28/Jul/2026:08:10:24 +0200] "GET /content.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 ...
show more
20.104.18.253 - - [28/Jul/2026:08:10:24 +0200] "GET /content.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:08:10:24 +0200] "GET /cream1.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:08:10:25 +0200] "GET /css.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇮🇳
evicky2002
2026-07-28 06:00:00
(15 minutes ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇩🇪
macrob
2026-07-28 05:56:33
(18 minutes ago)
2026/07/28 05:56:27 [error] 495404#495404: *419381611 access forbidden by rule, client: 20.104.18.25 ...
show more
2026/07/28 05:56:27 [error] 495404#495404: *419381611 access forbidden by rule, client: 20.104.18.253, server: fn.binixo.es, request: "GET /install.php HTTP/2.0", host: "www.fastcredit.net.ua"
2026/07/28 05:56:31 [error] 495404#495404: *419381635 access forbidden by rule, client: 20.104.18.253, server: fn.binixo.es, request: "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/2.0", host: "www.fastcredit.net.ua"
2026/07/28 05:56:32 [error] 495404#495404: *419381635 access forbidden by rule, client: 20.104.18.253, server: fn.binixo.es, request: "GET /modules/mod_simplefileuploadv1.3/elements/i8hqok6nr.php HTTP/2.0", host: "www.fastcredit.net.ua"
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-07-28 05:55:53
(19 minutes ago)
[Tue Jul 28 06:55:51.873656 2026] [proxy_fcgi:error] [pid 2296122:tid 139826552632896] [client 20.10 ...
show more
[Tue Jul 28 06:55:51.873656 2026] [proxy_fcgi:error] [pid 2296122:tid 139826552632896] [client 20.104.18.253:50520] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 06:55:51.988107 2026] [proxy_fcgi:error] [pid 2296122:tid 139826368058944] [client 20.104.18.253:50520] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 06:55:52.153231 2026] [proxy_fcgi:error] [pid 2296122:tid 139825462105664] [client 20.104.18.253:50520] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 06:55:52.542196 2026] [proxy_fcgi:error] [pid 2296122:tid 139825839580736] [client 20.104.18.253:50520] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 06:55:52.657887 2026] [proxy_fcgi:error] [pid 2296122:tid 139826527454784] [client 20.104.18.253:50520] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇩🇪
hchristo
2026-07-28 05:53:31
(21 minutes ago)
[Tue Jul 28 07:53:29.773588 2026] [proxy_fcgi:error] [pid 25781:tid 25865] [client 20.104.18.253:103 ...
show more
[Tue Jul 28 07:53:29.773588 2026] [proxy_fcgi:error] [pid 25781:tid 25865] [client 20.104.18.253:10309] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 07:53:29.923699 2026] [proxy_fcgi:error] [pid 25781:tid 25880] [client 20.104.18.253:10309] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 07:53:30.083575 2026] [proxy_fcgi:error] [pid 25781:tid 25848] [client 20.104.18.253:10309] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 07:53:30.416984 2026] [proxy_fcgi:error] [pid 25781:tid 25863] [client 20.104.18.253:10309] AH01071: Got error 'Primary script unknown'
[Tue Jul 28 07:53:30.567280 2026] [proxy_fcgi:error] [pid 25781:tid 25877] [client 20.104.18.253:10309] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇩🇰
ScamAware
2026-07-28 05:44:23
(30 minutes ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight.
show less
Bad Web Bot
2026-07-28 05:36:32
(38 minutes ago)
Scanning for PHP files:
20.104.18.253 - - [28/Jul/2026:06:36:32 +0100] "GET /default.php HTTP/1.1" ...
show more
Scanning for PHP files:
20.104.18.253 - - [28/Jul/2026:06:36:32 +0100] "GET /default.php HTTP/1.1" 200 234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇫🇷
solution.it
2026-07-28 05:31:44
(43 minutes ago)
[Tue Jul 28 07:31:43.885682 2026] [php7:error] [pid 1189938:tid 1189938] [client 20.104.18.253:5858] ...
show more
[Tue Jul 28 07:31:43.885682 2026] [php7:error] [pid 1189938:tid 1189938] [client 20.104.18.253:5858] script '/var/www/html/six.solution.it/content.php' not found or unable to stat
show less
Web App Attack
🇬🇧
openstrike.co.uk
2026-07-28 05:13:37
(1 hour ago)
475 attacks on PHP URLs:
GET /nf.php HTTP/1.1
Web App Attack
2026-07-28 05:10:19
(1 hour ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
Viveronese
2026-07-28 05:09:37
(1 hour ago)
HTTP vulnerability scanning
Web App Attack
🇩🇪
febrian.de
2026-07-28 05:07:37
(1 hour ago)
Excessive HTTP(S) probing or bad web bot detected by Fail2Ban
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-07-28 05:01:02
(1 hour ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇮🇩
zam
2026-07-28 04:59:18
(1 hour ago)
20.104.18.253 - - [28/Jul/2026:04:59:14 +0000] "GET /images/byp.php HTTP/1.1" 302 268
Web App Attack
🇺🇸
kbeezie
2026-07-28 04:56:33
(1 hour ago)
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /dropdown.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 ...
show more
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /dropdown.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /edit-tags.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /edit.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /elp.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.104.18.253 - - [28/Jul/2026:00:56:33 -0400] "GET /error.php HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack