🇩🇰
SaltySoftworks
2026-08-22 17:55:58
(2 minutes ago)
User agent spoofing
Page: /wp-content/plugins/hellopress/wp_filemanager.php
Spoofing
Brute-Force
Web App Attack
Hacking
2026-08-22 17:55:21
(3 minutes ago)
20.89.241.218 - autoconfig.sliver85.eu - [22/Aug/2026:19:55:13 +0200] "GET /wp-content/plugins/hello ...
show more
20.89.241.218 - autoconfig.sliver85.eu - [22/Aug/2026:19:55:13 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-"
20.89.241.218 - autoconfig.sliver85.eu - [22/Aug/2026:19:55:16 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-"
20.89.241.218 - autoconfig.sliver85.eu - [22/Aug/2026:19:55:20 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 444 "-"
...
show less
Brute-Force
Web App Attack
🇩🇪
23p02732
2026-08-22 17:55:16
(3 minutes ago)
Automated web scanning and malicious probing
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Séfora Srl
2026-08-22 17:50:33
(8 minutes ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
🇱🇹
sobakintech
2026-08-22 17:49:15
(9 minutes ago)
Detected by CrowdSec on Traefik reverse proxy: crowdsecurity/http-probing
Port Scan
Web App Attack
🇳🇱
thedreamer.nl
2026-08-22 17:49:00
(9 minutes ago)
20.89.241.218 - - [22/Aug/2026:19:47:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.89.241.218 - - [22/Aug/2026:19:47:34 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "JP" "Osaka" "34.69300" "135.50050"
20.89.241.218 - - [22/Aug/2026:19:47:37 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "JP" "Osaka" "34.69300" "135.50050"
20.89.241.218 - - [22/Aug/2026:19:47:39 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "JP" "Osaka" "34.69300" "135.50050"
20.89.241.218 - - [22/Aug/2026:19:47:42 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "JP" "Osaka" "34.69300" "135.50050"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
33three
2026-08-22 17:48:53
(9 minutes ago)
Fail2Ban jail WebAttack triggered
Brute-Force
🇫🇷
AGEPCom
2026-08-22 17:47:10
(11 minutes ago)
Smart-Ban: IP bannie via score AbuseIPDB
Brute-Force
Web App Attack
🇧🇷
Halux
2026-08-22 17:46:23
(12 minutes ago)
20.89.241.218 Probing protected path or service
Web App Attack
🇨🇭
Mario Bretscher
2026-08-22 17:44:09
(14 minutes ago)
[Sat Aug 22 19:44:08.101318 2026] [php:error] [pid 2120824] [client 20.89.241.218:50250] script '/va ...
show more
[Sat Aug 22 19:44:08.101318 2026] [php:error] [pid 2120824] [client 20.89.241.218:50250] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat
[Sat Aug 22 19:44:08.334812 2026] [php:error] [pid 2120824] [client 20.89.241.218:50250] script '/var/www/html/images.php' not found or unable to stat
[Sat Aug 22 19:44:08.567369 2026] [php:error] [pid 2120824] [client 20.89.241.218:50250] script '/var/www/html/222.php' not found or unable to stat
...
show less
Web App Attack
🇬🇧
Greg Poulson
2026-08-22 17:44:02
(14 minutes ago)
Our website was hit by this DDOS at a rate of 66 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇩🇪
pltcldvlpr
2026-08-22 17:41:42
(17 minutes ago)
CMS/framework probe: 20.89.241.218 - - [22/Aug/2026:19:41:41 +0200] "GET /wp-content/plugins/hellopr ...
show more
CMS/framework probe: 20.89.241.218 - - [22/Aug/2026:19:41:41 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" asn=8075 org="Microsoft Corporation" country=JP
...
show less
Web App Attack
🇺🇸
ruusvuu
2026-08-22 17:37:33
(21 minutes ago)
Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP.
Targeted paths: /3 ...
show more
Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP.
Targeted paths: /3PJcpMFsD8B.php, /5PJcpMFsD8B.php, /pk.php, /bulet.php, //av.php.
Sample log lines:
[helpdesk] 8/22/2026 10:37:33 20.89.241.218 GET /wpxml.php 404 148 1.1 ms
[helpdesk] 8/22/2026 10:37:33 20.89.241.218 GET /file1221.php 404 151 1.3 ms
[helpdesk] 8/22/2026 10:37:33 20.89.241.218 GET /nox.php 404 146 1.0 ms
Detected by an automated web-server log monitor.
show less
Web App Attack
🇩🇪
Holger
2026-08-22 17:37:28
(21 minutes ago)
URL probing: GET /wp-content/plugins/hellopress/wp_filemanager.php
Web App Attack
🇬🇷
setupgr
2026-08-22 17:36:49
(21 minutes ago)
(mod_security) mod_security (id:1000001) triggered by 20.89.241.218 (JP/Japan/Osaka/Osaka/-/[AS8075 ...
show more
(mod_security) mod_security (id:1000001) triggered by 20.89.241.218 (JP/Japan/Osaka/Osaka/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Aug 22 20:36:48.629791 2026] [security2:error] [pid 712842:tid 713038] [client 20.89.241.218:3125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-content/plugins/hellopress/wp_filemanager.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/hellopress/wp_filemanager.php"] [severity "CRITICAL"] [tag "security"] [hostname "host.setworldup365.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aoneMBT_zq31IA407VUXagAAAZU"]
show less
Port Scan