🇺🇸
bazter.pro
2025-12-24 22:43:57
UTC ·
(10 months ago)
Auto-Ban [2025-12-25 00:43:53]: CRITICAL: Sensitive files (20) [Paths: 211] | Details: Sensitive files/paths: /wp-admin/maint/wp-is.php, /wp-admin/admin-post.php, /wp-content/themes/admin.php, /wp-admin/includes/xmrlpc.php, /wp-admin/css/colour.php | ...
show more
Auto-Ban [2025-12-25 00:43:53]: CRITICAL: Sensitive files (20) [Paths: 211] | Details: Sensitive files/paths: /wp-admin/maint/wp-is.php, /wp-admin/admin-post.php, /wp-content/themes/admin.php, /wp-admin/includes/xmrlpc.php, /wp-admin/css/colour.php | 404 errors (207): /indo.php, /sko.php, /jp.php, /chosen.php, /nij.php, /wp-update.php, /asas.php, /wp-content/uploads/wp.php, /file4.php, /wp-content/upgrade/index.php (and 197 more) | 403 errors (11): /wp-admin/includes/xmrlpc.php, /wp-mail.php/wp-includes/ID3/rnEPv9.php, /wp-content/themes/admin.php, /wp-admin/js/wp-conflg.php, /zwso.php, /wp-admin/admin-post.php, /shell.php, /wp-admin/maint/index.php, /wp-admin/css/colour.php, /wp-admin/maint/wp-is.php (and 1 more) | Other paths: /wp-links-opml.php, /wp-load.php
show less
Hacking
Web App Attack
🇨🇳
ThreatBook.io
2025-12-18 00:44:57
UTC ·
(10 months ago)
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/4.194.16.164
2025-12-17 04:30:53 /n.php
2025-12-17 04:30:53 /raw.php
2025-12-17 04:30:53 /333.php
2025-12-17 04:30:53 /an7.php
2025-12-17 04:30:53 /shoha.php
2025-12-17 04: ...
show more
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/4.194.16.164
2025-12-17 04:30:53 /n.php
2025-12-17 04:30:53 /raw.php
2025-12-17 04:30:53 /333.php
2025-12-17 04:30:53 /an7.php
2025-12-17 04:30:53 /shoha.php
2025-12-17 04:30:53 /wp-content/plugins/hellopress/wp_filemanager.php
show less
Web App Attack
🇮🇹
mauri64
2025-12-18 00:30:30
UTC ·
(10 months ago)
Troppi errori Apache (424)
Hacking
🇹🇷
rtbh.com.tr
2025-12-17 20:10:30
UTC ·
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
Anonymous
2025-12-17 09:34:41
UTC ·
(10 months ago)
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
Hacking
Web App Attack
🇮🇹
LTM
2025-12-17 07:20:01
UTC ·
(10 months ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2025-12-17 06:13:35
UTC ·
(10 months ago)
218 attacks on PHP URLs:
GET /zxz.php HTTP/1.1
Web App Attack
🇭🇺
DumaNet
2025-12-17 05:39:00
UTC ·
(10 months ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 17. 02:17:55
Source IP: 4.194.16.164
Portion of the log(s):
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /default.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 17. 02:17:55
Source IP: 4.194.16.164
Portion of the log(s):
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /default.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /update/f35.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /media.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /wp-content/upgrade/index.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /js.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:54 +0100] "GET /nope.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:53 +0100] "GET /flower.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:53 +0100] "GET /up.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:53 +0100] "GET /layout.php HTTP/1.1" 404 153 "-" "-"
4.194.16.164 - [17/Dec/2025:02:15:53 +0100] "GET /jmfi2.php HTTP/1.1" 404 153 "-" "-"
show less
Web App Attack
🇺🇸
octageeks.com
2025-12-17 05:06:52
UTC ·
(10 months ago)
Wordpress malicious attack:[octascan]
Web App Attack
🇩🇪
McClay
2025-12-17 01:37:35
UTC ·
(10 months ago)
HTTP-404 spam:4.194.16.164 - - [17/Dec/2025:02:37:31 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 995 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /shoha.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/ ...
show more
HTTP-404 spam:4.194.16.164 - - [17/Dec/2025:02:37:31 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 995 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /shoha.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /raw.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /an7.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /333.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /n.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:32 +0100] "GET /ahax.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:33 +0100] "GET /mds.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:33 +0100] "GET /bless5.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:33 +0100] "GET /admir.php HTTP/1.1" 404 190 "-" "-"
4.194.16.164 - - [17/Dec/2025:02:37:33 +0100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 404 99
...
show less
Web App Attack
🇳🇱
Site.eu
2025-12-17 01:25:34
UTC ·
(10 months ago)
Excessive multi-domain requests
Brute-Force
🇷🇺
DZBOT
2025-12-17 01:12:55
UTC ·
(10 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
Kimax
2025-12-17 01:09:05
UTC ·
(10 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
guillaume illien
2025-12-17 01:08:23
UTC ·
(10 months ago)
4.194.16.164 - - [17/Dec/2025:01:08:19 +0000] "GET /wp-links-opml.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:20 +0000] "GET /mah.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:20 +0000] "GET /asas.php HTTP/1. ...
show more
4.194.16.164 - - [17/Dec/2025:01:08:19 +0000] "GET /wp-links-opml.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:20 +0000] "GET /mah.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:20 +0000] "GET /asas.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:21 +0000] "GET /wp-includes/IXR/about.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:21 +0000] "GET /mans.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:22 +0000] "GET /build.php HTTP/1.1" 301 178 "-" "-"
4.194.16.164 - - [17/Dec/2025:01:08:22 +0000] "GET /atomlib.php HTTP/1.1" 301 178 "-" "-"
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇧🇪
boxed-it
2025-12-17 01:00:37
UTC ·
(10 months ago)
GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for 4m20s, wasted 15.35kB)
Web App Attack