๐ฌ๐ง
openstrike.co.uk
2026-07-09 05:16:17
(2 weeks ago)
28 attacks on PHP URLs:
GET /wp-links-opml.php HTTP/1.1
Web App Attack
๐ฌ๐ง
Buster
2026-07-08 20:16:00
(2 weeks ago)
Mass distributed attack attempts from Perm Blocked ASN and country
Open Proxy
Brute-Force
Web App Attack
๐ณ๐ฟ
Antinson
2026-07-08 17:47:20
(2 weeks ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
๐ซ๐ท
IRISIO
2026-07-08 17:30:12
(2 weeks ago)
scans/SQL injection/spam posts : 216 queries
Web App Attack
SQL Injection
๐ซ๐ท
LRob
2026-07-08 17:25:33
(2 weeks ago)
CrowdSec: crowdsecurity/http-backdoors-attempts | req: ["/.well-known/ws.php","/1.php"] | UA: ["Mozi ...
show more
CrowdSec: crowdsecurity/http-backdoors-attempts | req: ["/.well-known/ws.php","/1.php"] | UA: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]
show less
Hacking
๐ช๐ธ
alferez
2026-07-08 17:11:18
(2 weeks ago)
Searching hacked php files
Hacking
Exploited Host
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-07-08 16:51:17
(2 weeks ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
๐ช๐ธ
el-brujo
2026-07-08 16:49:43
(2 weeks ago)
[Wed Jul 08 18:49:42.543577 2026] [proxy_fcgi:error] [pid 2104383:tid 2104504] [remote 40.80.83.97:0 ...
show more
[Wed Jul 08 18:49:42.543577 2026] [proxy_fcgi:error] [pid 2104383:tid 2104504] [remote 40.80.83.97:0] AH01071: Got error 'Primary script unknown\n'
[Wed Jul 08 18:49:42.738723 2026] [proxy_fcgi:error] [pid 2104383:tid 2104490] [remote 40.80.83.97:0] AH01071: Got error 'Primary script unknown\n'
...
show less
Hacking
Web App Attack
๐ง๐ช
Saec
2026-07-08 16:48:01
(2 weeks ago)
Jarvis auto-ban: CF top attacker on saec.me (37 hits, IN)
Port Scan
Web App Attack
๐ซ๐ท
LRob
2026-07-08 16:20:44
(2 weeks ago)
CrowdSec: crowdsecurity/http-probing | req: ["/wp-content/themes/haha.php","/wp-content/themes/theme ...
show more
CrowdSec: crowdsecurity/http-probing | req: ["/wp-content/themes/haha.php","/wp-content/themes/theme/about.php","/xmr.php","/about.php","/admin.php","/adminfuns.php","/as.php","/bolt.php","/cgi-bin/","/class-t.api.php","/edit.php"] | UA: ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"]
show less
Port Scan
Web App Attack
Anonymous
2026-07-08 16:20:39
(2 weeks ago)
40.80.83.97 - - [08/Jul/2026:18:20:34 +0200] "GET /.trash7206/index.php HTTP/1.1" 404 440 "-" "Mozil ...
show more
40.80.83.97 - - [08/Jul/2026:18:20:34 +0200] "GET /.trash7206/index.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
40.80.83.97 - - [08/Jul/2026:18:20:35 +0200] "GET /.well-known/logs233/index.php?p= HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
40.80.83.97 - - [08/Jul/2026:18:20:35 +0200] "GET /wp-content/themes/haha.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
40.80.83.97 - - [08/Jul/2026:18:20:35 +0200] "GET /wp-content/themes/theme/about.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
40.80.83.97 - - [08/Jul/2026:18:20:35 +0200] "GET /wp-content/plugins/plugin/index.php HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows NT 10.
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
poundawebsiteltd
2026-07-08 16:18:47
(2 weeks ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 40.80.83.9 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 40.80.83.97 (IN/India/-): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 40.80.83.97 (IN/India/-): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
๐ฉ๐ช
MBombeck
2026-07-08 15:53:55
(2 weeks ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
๐บ๐ธ
mccsoft.io
2026-07-08 15:49:02
(2 weeks ago)
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show more
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
ersei.net
2026-07-08 13:11:15
(2 weeks ago)
Brute force multiple 403s
Brute-Force