๐ซ๐ฎ
Christopher Hughes
2026-05-24 20:01:22
(1 week ago)
[Sun May 24 21:01:20.968990 2026] [proxy_fcgi:error] [pid 4160961:tid 139775034009152] [client 20.19 ...
show more
[Sun May 24 21:01:20.968990 2026] [proxy_fcgi:error] [pid 4160961:tid 139775034009152] [client 20.195.192.35:7059] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:01:21.416196 2026] [proxy_fcgi:error] [pid 4160961:tid 139774761342528] [client 20.195.192.35:7059] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:01:21.710755 2026] [proxy_fcgi:error] [pid 4160961:tid 139773939283520] [client 20.195.192.35:7059] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:01:21.933060 2026] [proxy_fcgi:error] [pid 4160961:tid 139774811698752] [client 20.195.192.35:7059] AH01071: Got error 'Primary script unknown'
[Sun May 24 21:01:22.155561 2026] [proxy_fcgi:error] [pid 4160961:tid 139775042401856] [client 20.195.192.35:7059] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
Anonymous
2026-05-24 19:41:27
(1 week ago)
20.195.192.35 - - [25/May/2026:03:41:22 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.195.192.35 - - [25/May/2026:03:41:22 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 196 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:23 +0800] "GET /x.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:23 +0800] "GET /201.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:24 +0800] "GET /ops.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:24 +0800] "GET /samll.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:25 +0800] "GET /ingfo.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:25 +0800] "GET /c55cdler.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:26 +0800] "GET /error_log.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:27 +0800] "GET /xenon1337.php HTTP/1.1" 404 16 "-" "-"
20.195.192.35 - - [25/May/2026:03:41:27 +0800] "GET /alfa403.php HTTP/1.1" 404 16 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-05-24 19:41:18
(1 week ago)
[Sun May 24 20:41:16.856601 2026] [proxy_fcgi:error] [pid 4155464:tid 139774769735232] [client 20.19 ...
show more
[Sun May 24 20:41:16.856601 2026] [proxy_fcgi:error] [pid 4155464:tid 139774769735232] [client 20.195.192.35:7144] AH01071: Got error 'Primary script unknown'
[Sun May 24 20:41:17.088752 2026] [proxy_fcgi:error] [pid 4155464:tid 139774786520640] [client 20.195.192.35:7144] AH01071: Got error 'Primary script unknown'
[Sun May 24 20:41:17.304358 2026] [proxy_fcgi:error] [pid 4155464:tid 139773712778816] [client 20.195.192.35:7144] AH01071: Got error 'Primary script unknown'
[Sun May 24 20:41:17.538942 2026] [proxy_fcgi:error] [pid 4155464:tid 139773687600704] [client 20.195.192.35:7144] AH01071: Got error 'Primary script unknown'
[Sun May 24 20:41:17.754822 2026] [proxy_fcgi:error] [pid 4155464:tid 139774174148160] [client 20.195.192.35:7144] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
๐ต๐น
rncbc
2026-05-24 19:39:54
(1 week ago)
[Sun May 24 20:39:53.489621 2026] [authz_core:error] [pid 85300:tid 85300] [client 20.195.192.35:146 ...
show more
[Sun May 24 20:39:53.489621 2026] [authz_core:error] [pid 85300:tid 85300] [client 20.195.192.35:14678] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/wp-content
[Sun May 24 20:39:53.714786 2026] [authz_core:error] [pid 85300:tid 85300] [client 20.195.192.35:14678] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/x.php
[Sun May 24 20:39:53.914302 2026] [authz_core:error] [pid 85300:tid 85300] [client 20.195.192.35:14678] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/201.php
...
show less
Brute-Force
Bad Web Bot
Web App Attack
SSH
๐ต๐ฑ
nfsec.pl
2026-05-24 19:37:49
(1 week ago)
20.195.192.35 - - [24/May/2026:19:37:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.195.192.35 - - [24/May/2026:19:37:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 357 "-" "-"
20.195.192.35 - - [24/May/2026:19:37:47 +0000] "GET /x.php HTTP/1.1" 403 357 "-" "-"
20.195.192.35 - - [24/May/2026:19:37:48 +0000] "GET /201.php HTTP/1.1" 403 357 "-" "-"
20.195.192.35 - - [24/May/2026:19:37:48 +0000] "GET /ops.php HTTP/1.1" 403 357 "-" "-"
20.195.192.35 - - [24/May/2026:19:37:49 +0000] "GET /samll.php HTTP/1.1" 403 357 "-" "-"
...
show less
Web App Attack
Exploited Host
๐ง๐ฌ
Stoyko Stoykov
2026-05-24 19:34:34
(1 week ago)
20.195.192.35 - - [24/May/2026:22:34:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.195.192.35 - - [24/May/2026:22:34:33 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-"
...
show less
Hacking
Web App Attack
๐บ๐ธ
brantknudson.org
2026-05-24 19:32:45
(1 week ago)
Request path 'GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1'
Web App Attack
Hacking
๐ซ๐ฎ
Kimmo Rieskaniemi
2026-05-24 19:32:15
(1 week ago)
CrowdSec triggered crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
TrackerSB
2026-05-24 19:30:23
(1 week ago)
20.195.192.35 - "-" [24/May/2026:21:30:22 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1 ...
show more
20.195.192.35 - "-" [24/May/2026:21:30:22 +0200] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 301 169 "-" "-" "20.195.192.35"
20.195.192.35 - "-" [24/May/2026:21:30:22 +0200] "GET /wp-admin/js/ HTTP/1.1" 301 169 "-" "-" "20.195.192.35"
...
show less
Web App Attack
๐ณ๐ฑ
MM-bot
2026-05-24 19:12:54
(1 week ago)
URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-05-24 21: ...
show more
URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-05-24 21:12:54 UTC+2)
show less
Web App Attack
Hacking
๐ฉ๐ช
itsolon
2026-05-24 19:12:02
(1 week ago)
[24/May/2026:21:11:58 +0200] 177964991888.187460 20.195.192.35 4035 217.154.7.177 443
[24/May/2026:2 ...
show more
[24/May/2026:21:11:58 +0200] 177964991888.187460 20.195.192.35 4035 217.154.7.177 443
[24/May/2026:21:11:59 +0200] 177964991954.681808 20.195.192.35 4049 217.154.7.177 80
[24/May/2026:21:11:59 +0200] 177964991962.184042 20.195.192.35 4035 217.154.7.177 443
[24/May/2026:21:12:00 +0200] 177964992062.623135 20.195.192.35 4049 217.154.7.177 80
[24/May/2026:21:12:01 +0200] 177964992151.195817 20.195.192.35 4035 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
Anonymous
2026-05-24 19:10:29
(1 week ago)
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
Hacking
Web App Attack
๐ซ๐ท
Jimbo67
2026-05-24 19:06:20
(1 week ago)
Cloudflare WAF: 154 hits in 300s | actions: ['managed_challenge', 'block'] | URIs: /wp-content/plugi ...
show more
Cloudflare WAF: 154 hits in 300s | actions: ['managed_challenge', 'block'] | URIs: /wp-content/plugins/hellopress/wp_filemanager.php, /x.php, /201.php, /ingfo.php, /c55cdler.php
show less
Web App Attack
Bad Web Bot
๐ซ๐ท
Lacrimosa99
2026-05-24 19:02:48
(1 week ago)
20.195.192.35 - - [24/May/2026:21:02:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.195.192.35 - - [24/May/2026:21:02:40 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4780 "-" "-"
20.195.192.35 - - [24/May/2026:21:02:48 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 363 "-" "-"
20.195.192.35 - - [24/May/2026:21:02:48 +0200] "GET /wp-admin/css/colour.php HTTP/1.1" 404 363 "-" "-"
...
show less
Web Spam
๐ซ๐ท
lindi
2026-05-24 18:44:55
(1 week ago)
Probing for resource vulnerabilities
...
Web Spam
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack