🇩🇪
pscriptos
2026-07-06 23:26:58
(24 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇮🇩
soc-yk
2026-07-06 23:06:37
(45 minutes ago)
Type: suspicious_network_activity
Risk: 83
Events: 1297
Evidence:
- Persistent suspicious network a ...
show more
Type: suspicious_network_activity
Risk: 83
Events: 1297
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
show less
Port Scan
Hacking
🇧🇪
voormedia
2026-07-06 22:52:55
(58 minutes ago)
Accessed trap at '/admin.php'
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-07-06 22:36:05
(1 hour ago)
20.151.225.63 - - [06/Jul/2026:23:36:04 +0100] "GET //cgi-bin/index.php HTTP/1.1" 404 2480 "-" "-"
Bad Web Bot
🇨🇦
Roper123
2026-07-06 22:36:01
(1 hour ago)
Web exploits
Hacking
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-06 22:29:14
(1 hour ago)
Brute-Force
Web App Attack
🇺🇸
helios.live
2026-07-06 22:25:13
(1 hour ago)
2026/07/06 22:25:13 [error] 3423162#3423162: *1026004 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/07/06 22:25:13 [error] 3423162#3423162: *1026004 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.151.225.63, server: staging.kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-staging.sock:", host: "staging.kocerroxy.com"
2026/07/06 22:25:13 [error] 3423162#3423162: *1026004 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.151.225.63, server: staging.kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-staging.sock:", host: "staging.kocerroxy.com"
2026/07/06 22:25:13 [error] 3423162#3423162: *1026004 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.151.225.63, server: staging.kocerroxy.com, request: "GET /x.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/
...
show less
Web App Attack
🇺🇸
Mehmet_The_Script_Kiddie
2026-07-06 22:20:20
(1 hour ago)
CloudFlare WAF REPORT: /wp-content/plugins/hellopress/wp_filemanager.php
Bad Web Bot
Web App Attack
2026-07-06 22:07:47
(1 hour ago)
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 20733 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 20695 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /x.php HTTP/1.1" 404 20647 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /wss.php HTTP/1.1" 404 20651 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /ty.php?p= HTTP/1.1" 404 20649 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:46 +0000] "GET /155.php HTTP/1.1" 404 20651 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:47 +0000] "GET /ops.php HTTP/1.1" 404 20651 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:47 +0000] "GET /ingfo.php HTTP/1.1" 404 20655 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:47 +0000] "GET /error_log.php HTTP/1.1" 404 20663 "-" "-" "-"
20.151.225.63 - - [06/Jul/2026:22:07:47 +0000] "GET //ok.php HTTP/1.1" 404 20649 "-" "-" "-"
...
show less
Port Scan
Brute-Force
🇫🇷
tecnicorioja
2026-07-06 22:01:33
(1 hour ago)
wp-login attack [06/Jul/2026:08:36:39
Brute-Force
Web App Attack
🇩🇪
Dennis
2026-07-06 21:31:29
(2 hours ago)
20.151.225.63 has been banned for triggering http-probing (11 events over 1.122533971s).
Brute-Force
Web App Attack
🇳🇱
Brict IT
2026-07-06 21:24:04
(2 hours ago)
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-07-06 21:17:50
(2 hours ago)
2026/07/06 21:17:44 [error] 1864608#1864608: *355999123 access forbidden by rule, client: 20.151.225 ...
show more
2026/07/06 21:17:44 [error] 1864608#1864608: *355999123 access forbidden by rule, client: 20.151.225.63, server: binofferes.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "binofferes.com"
2026/07/06 21:17:45 [error] 1864608#1864608: *355999123 access forbidden by rule, client: 20.151.225.63, server: binofferes.com, request: "GET ///admin.php HTTP/1.1", host: "binofferes.com"
2026/07/06 21:17:49 [error] 1864608#1864608: *355999123 access forbidden by rule, client: 20.151.225.63, server: binofferes.com, request: "GET /wp-content/uploads/ HTTP/1.1", host: "binofferes.com"
...
show less
Web App Attack
🇮🇩
zam
2026-07-06 20:51:24
(3 hours ago)
20.151.225.63 - - [06/Jul/2026:20:51:20 +0000] "GET /simple.php HTTP/1.1" 301 285
Web App Attack
🇳🇴
tmiland
2026-07-06 20:44:02
(3 hours ago)
(wordpress_404) WordPress Plugins Honeypot Trap 20.151.225.63 (CA/Canada/-): 2 in the last 3600 secs ...
show more
(wordpress_404) WordPress Plugins Honeypot Trap 20.151.225.63 (CA/Canada/-): 2 in the last 3600 secs; IP: 20.151.225.63; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.151.225.63 - - [06/Jul/2026:22:36:39 +0200] "GET /.well-known/about.php HTTP/1.1" 404 146 "-" "-" 20.151.225.63 - - [06/Jul/2026:22:44:01 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-"
show less
Brute-Force