Anonymous
2025-12-28 19:47:59
UTC ·
(10 months ago)
$f2bV_matches
Brute-Force
🇫🇷
geot
2025-12-22 14:21:51
UTC ·
(10 months ago)
298 requests, including :
GET /<<removed>>.php HTTP/1.1
GET /mail.php HTTP/1.1
GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1
GET /makeasmtp.php HTTP/1.1
GET /doc.php HTTP/1.1
GET /file.php HTTP/1.1
GET /<<removed>>.php?p= HTTP/1.1
G ...
show more
298 requests, including :
GET /<<removed>>.php HTTP/1.1
GET /mail.php HTTP/1.1
GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1
GET /makeasmtp.php HTTP/1.1
GET /doc.php HTTP/1.1
GET /file.php HTTP/1.1
GET /<<removed>>.php?p= HTTP/1.1
GET /about.php?p= HTTP/1.1
show less
Web App Attack
🇬🇧
openstrike.co.uk
2025-12-22 06:14:21
UTC ·
(10 months ago)
447 attacks on PHP URLs:
GET /angelV2.php HTTP/1.1
Web App Attack
🇺🇸
octageeks.com
2025-12-22 05:06:54
UTC ·
(10 months ago)
Wordpress malicious attack:[octascan]
Web App Attack
🇬🇧
[email protected]
2025-12-22 00:57:43
UTC ·
(10 months ago)
...
Brute-Force
SSH
🇭🇺
DumaNet
2025-12-22 00:09:00
UTC ·
(10 months ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 21. 13:18:38
Source IP: 4.196.104.8
Portion of the log(s):
4.196.104.8 - [21/Dec/2025:13:18:37 +0100] "GET /zfile.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:1 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 21. 13:18:38
Source IP: 4.196.104.8
Portion of the log(s):
4.196.104.8 - [21/Dec/2025:13:18:37 +0100] "GET /zfile.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:36 +0100] "GET /cache.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:36 +0100] "GET /k.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:35 +0100] "GET /mariju.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:35 +0100] "GET /406.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:35 +0100] "GET /content.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:34 +0100] "GET /karak.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:34 +0100] "GET /we.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:34 +0100] "GET /wso.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:34 +0100] "GET /rk2.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:13:18:33 +0100
show less
Web App Attack
🇭🇺
DumaNet
2025-12-21 23:51:00
UTC ·
(10 months ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 21. 12:56:38
Source IP: 4.196.104.8
Portion of the log(s):
4.196.104.8 - [21/Dec/2025:12:56:35 +0100] "GET /minik.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:5 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 21. 12:56:38
Source IP: 4.196.104.8
Portion of the log(s):
4.196.104.8 - [21/Dec/2025:12:56:35 +0100] "GET /minik.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:35 +0100] "GET /wp-mail.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:35 +0100] "GET /axx.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:34 +0100] "GET /cord.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:34 +0100] "GET /blurbs.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:34 +0100] "GET /bless.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:34 +0100] "GET /db.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:33 +0100] "GET /wp-activate.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:33 +0100] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-"
4.196.104.8 - [21/Dec/2025:12:56:33 +0100] "GET /admin.php HTTP/1.1" 404 153 "-" "-"
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-21 22:59:26
UTC ·
(10 months ago)
Auto-ban: >3000 req/min op 2025-12-21
Hacking
Web App Attack
SSH
🇨🇭
YF
2025-12-21 16:05:02
UTC ·
(10 months ago)
Unauthorized WordPress access attempt
Brute-Force
Web App Attack
🇬🇧
cybersteve99
2025-12-21 15:50:23
UTC ·
(10 months ago)
Too many 4xx Requests -
Brute-Force
Web App Attack
🇫🇷
lindi
2025-12-21 15:48:59
UTC ·
(10 months ago)
Probing for resource vulnerabilities
...
Web Spam
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
bryth
2025-12-21 15:47:26
UTC ·
(10 months ago)
Wordpress login/xmlrpc abuse (Sun Dec 21 03:40:56 PM UTC 2025)
Hacking
Web App Attack
🇳🇱
Roderic
2025-12-21 15:14:55
UTC ·
(10 months ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
Port Scan
🇺🇸
chrisj
2025-12-21 15:14:50
UTC ·
(10 months ago)
[Sun Dec 21 15:04:43.182611 2025] [proxy_fcgi:error] [pid 864805:tid 864805] [client 4.196.104.8:52364] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 15:14:49.532327 2025] [proxy_fcgi:error] [pid 864805:tid 864805] [client 4.196.104.8:8765] ...
show more
[Sun Dec 21 15:04:43.182611 2025] [proxy_fcgi:error] [pid 864805:tid 864805] [client 4.196.104.8:52364] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 15:14:49.532327 2025] [proxy_fcgi:error] [pid 864805:tid 864805] [client 4.196.104.8:8765] AH01071: Got error 'Primary script unknown'
[Sun Dec 21 15:14:50.239091 2025] [proxy_fcgi:error] [pid 864805:tid 864805] [client 4.196.104.8:8765] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇮🇩
Burayot
2025-12-21 15:13:36
UTC ·
(10 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 4.196.104.8 (AU/Australia/-): 1 in the last 3600 secs
Web App Attack