🇪🇸
NullBlue
2026-07-01 19:07:37
(1 hour ago)
Web app attack: scanning for secrets/exploits (.env/.git/PHPUnit CVE). Captured by NullBlue67 honeyp ...
show more
Web app attack: scanning for secrets/exploits (.env/.git/PHPUnit CVE). Captured by NullBlue67 honeypot.
show less
Hacking
Web App Attack
🇫🇷
IRISIO
2026-07-01 10:43:58
(10 hours ago)
scans/SQL injection/spam posts : 61 queries
Web App Attack
SQL Injection
🇨🇿
akac
2026-07-01 10:00:57
(10 hours ago)
Web vulnerability scanning: HTTP/1.1 GET /z60.php
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-07-01 09:00:08
(11 hours ago)
Triggered Cloudflare WAF from HK.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HT ...
show more
Triggered Cloudflare WAF from HK.
Action taken: BLOCK
ASN: 8075 (Microsoft Corporation)
Protocol: HTTP/1.1 (GET method)
Endpoint: /lala.php
Timestamp: 2026-07-01T07:53:20Z
User-Agent: empty
show less
Bad Web Bot
🇸🇬
Cloudkul Cloudkul
2026-07-01 08:13:28
(12 hours ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇩🇪
macrob
2026-07-01 08:09:04
(12 hours ago)
2026/07/01 08:08:54 [error] 801445#801445: *342628741 access forbidden by rule, client: 20.205.57.74 ...
show more
2026/07/01 08:08:54 [error] 801445#801445: *342628741 access forbidden by rule, client: 20.205.57.74, server: bonusnews.org, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "bonusnews.org"
2026/07/01 08:09:01 [error] 801449#801449: *342628790 access forbidden by rule, client: 20.205.57.74, server: bonusnews.org, request: "GET /adminfuns.php HTTP/2.0", host: "bonusnews.org"
2026/07/01 08:09:02 [error] 801445#801445: *342628993 access forbidden by rule, client: 20.205.57.74, server: bonusnews.org, request: "GET /wp-content/admin.php HTTP/2.0", host: "bonusnews.org"
...
show less
Web App Attack
🇺🇸
ambor
2026-07-01 08:08:27
(12 hours ago)
Honeypot access: PHP file scan attempt: /.well-known/about.php. Path: /.well-known/about.php
Web App Attack
🇧🇬
HighWay
2026-07-01 08:05:14
(12 hours ago)
20.205.57.74 - - [01/Jul/2026:08:05:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.205.57.74 - - [01/Jul/2026:08:05:07 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 66905 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:08 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 64164 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:09 +0000] "GET /geforce.php HTTP/1.1" 404 60235 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:10 +0000] "GET /cc.php HTTP/1.1" 404 60235 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:11 +0000] "GET /tiny.php HTTP/1.1" 404 60235 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:12 +0000] "GET /w.php HTTP/1.1" 404 60235 "-" "-"
20.205.57.74 - - [01/Jul/2026:08:05:13 +0000] "GET /wp-file.php HTTP/1.1" 404 60327 "-" "-"
...
show less
Port Scan
Bad Web Bot
🇩🇪
patrisei
2026-07-01 08:02:40
(12 hours ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing
Port Scan
Web App Attack
🇩🇪
tall1oN
2026-07-01 07:57:29
(13 hours ago)
20.205.57.74 - - [01/Jul/2026:09:12:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.205.57.74 - - [01/Jul/2026:09:12:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 200 3715 "-" "-" "tallion.de"
20.205.57.74 - - [01/Jul/2026:09:57:28 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0" 200 14880 "-" "-" "tallion.de"
...
show less
Web App Attack
Port Scan
Hacking
🇩🇪
Skyrider
2026-07-01 07:46:29
(13 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
2026-07-01 07:43:35
(13 hours ago)
20.205.57.74 - - [01/Jul/2026:09:43:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.205.57.74 - - [01/Jul/2026:09:43:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:31 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:31 +0200] "GET /geforce.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:31 +0200] "GET /cc.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:32 +0200] "GET /tiny.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:32 +0200] "GET /w.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:32 +0200] "GET /wp-file.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:32 +0200] "GET /like.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:32 +0200] "GET /classwithtostring.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:33 +0200] "GET /u.php HTTP/1.1" 404 164 "-" "-"
20.205.57.74 - - [01/Jul/2026:09:43:33 +0200] "GET /wp.php
...
show less
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-07-01 07:41:18
(13 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇨🇭
blinx
2026-07-01 07:36:22
(13 hours ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
2026-07-01 07:35:54
(13 hours ago)
wp admin page access attempt
...
Hacking
Web App Attack