🇬🇧
openstrike.co.uk
2026-07-09 05:16:35
(1 day ago)
28 attacks on PHP URLs:
GET /wp-links-opml.php HTTP/1.1
Web App Attack
🇳🇱
Site.eu
2026-07-09 04:34:54
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
mw
2026-07-09 00:01:46
(1 day ago)
GET /wp-admin/css/bolt.php HTTP/1.1
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-08 22:28:54
(2 days ago)
Brute-Force
Web App Attack
2026-07-08 20:05:00
(2 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning
show less
Bad Web Bot
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-07-08 17:59:02
(2 days ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇩🇪
Skyrider
2026-07-08 17:57:15
(2 days ago)
crowdsecurity/http-backdoors-attempts
Web App Attack
🇩🇪
macrob
2026-07-08 17:55:53
(2 days ago)
2026/07/08 17:55:48 [error] 2206993#2206993: *360818584 access forbidden by rule, client: 20.24.211. ...
show more
2026/07/08 17:55:48 [error] 2206993#2206993: *360818584 access forbidden by rule, client: 20.24.211.29, server: antzfund.com, request: "GET /.dj/index.php HTTP/1.1", host: "antzfund.com"
2026/07/08 17:55:49 [error] 2206993#2206993: *360818589 access forbidden by rule, client: 20.24.211.29, server: antzfund.com, request: "GET /.tmb/ HTTP/1.1", host: "antzfund.com"
2026/07/08 17:55:49 [error] 2206993#2206993: *360818591 access forbidden by rule, client: 20.24.211.29, server: antzfund.com, request: "GET /.vscode/class-wp-http-client.php HTTP/1.1", host: "antzfund.com"
...
show less
Web App Attack
🇵🇱
miriks
2026-07-08 17:54:47
(2 days ago)
Automated scan detected: GET /.well-known/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK ...
show more
Automated scan detected: GET /.well-known/ — UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Port Scan
Web App Attack
🇳🇱
CryptoYakari
2026-07-08 17:43:54
(2 days ago)
20.24.211.29 - - [08/Jul/2026:20:43:50 +0300] "GET /.well-known/ HTTP/1.0" 404 8569 "-" "Mozilla/5.0 ...
show more
20.24.211.29 - - [08/Jul/2026:20:43:50 +0300] "GET /.well-known/ HTTP/1.0" 404 8569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.24.211.29 - - [08/Jul/2026:20:43:50 +0300] "GET /.well-known/about.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.24.211.29 - - [08/Jul/2026:20:43:50 +0300] "GET /.well-known/acme-challenge/ HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.24.211.29 - - [08/Jul/2026:20:43:50 +0300] "GET /.well-known/acme-challenge/block-supports/ HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.24.211.29 - - [08/Jul/2026:20:43:51 +0300] "GET /.well-known/acme-challenge/muse.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10
...
show less
Web Spam
Blog Spam
Web App Attack
Bad Web Bot
🇮🇩
soc-yk
2026-07-08 17:42:15
(2 days ago)
Type: suspicious_network_activity
Risk: 84
Events: 489
Evidence:
- Persistent suspicious network ac ...
show more
Type: suspicious_network_activity
Risk: 84
Events: 489
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
- Threat escalation behavior observed
show less
Port Scan
Hacking
🇮🇹
Inartis
2026-07-08 17:25:27
(2 days ago)
20.24.211.29 - - [08/Jul/2026:17:25:26 +0000] "GET /1.php HTTP/1.1" 302 474 "-" "Mozilla/5.0 (Window ...
show more
20.24.211.29 - - [08/Jul/2026:17:25:26 +0000] "GET /1.php HTTP/1.1" 302 474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ut-addicted.com
2026-07-08 17:18:13
(2 days ago)
\[08/Jul/2026:19:18:12 +0200\] ak6GVGxoLs9iGqinoROToQAAAI4 20.24.211.29 11948 78.46.187.162 443
\[08 ...
show more
\[08/Jul/2026:19:18:12 +0200\] ak6GVGxoLs9iGqinoROToQAAAI4 20.24.211.29 11948 78.46.187.162 443
\[08/Jul/2026:19:18:12 +0200\] ak6GVGxoLs9iGqinoROTogAAAII 20.24.211.29 11948 78.46.187.162 443
\[08/Jul/2026:19:18:12 +0200\] ak6GVGxoLs9iGqinoROTpAAAAIo 20.24.211.29 11948 78.46.187.162 443
show less
Brute-Force
Web App Attack
🇫🇮
Christopher Hughes
2026-07-08 16:53:38
(2 days ago)
[Wed Jul 08 17:53:35.484530 2026] [proxy_fcgi:error] [pid 1610162:tid 139822081484352] [client 20.24 ...
show more
[Wed Jul 08 17:53:35.484530 2026] [proxy_fcgi:error] [pid 1610162:tid 139822081484352] [client 20.24.211.29:8187] AH01071: Got error 'Primary script unknown'
[Wed Jul 08 17:53:36.169121 2026] [proxy_fcgi:error] [pid 1610162:tid 139822232487488] [client 20.24.211.29:8187] AH01071: Got error 'Primary script unknown'
[Wed Jul 08 17:53:36.684489 2026] [proxy_fcgi:error] [pid 1610162:tid 139821183923776] [client 20.24.211.29:8187] AH01071: Got error 'Primary script unknown'
[Wed Jul 08 17:53:37.191006 2026] [proxy_fcgi:error] [pid 1610162:tid 139822257665600] [client 20.24.211.29:8187] AH01071: Got error 'Primary script unknown'
[Wed Jul 08 17:53:37.428313 2026] [proxy_fcgi:error] [pid 1610162:tid 139822240880192] [client 20.24.211.29:8187] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇬🇧
Greg Poulson
2026-07-08 16:46:19
(2 days ago)
Our website was hit by this DDOS at a rate of 37 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force