Anonymous
2025-09-01 18:11:29
UTC ·
(1 year ago)
Automatic report: suspicious .php/.yml/web.config/WP paths with 404 in IIS
Web App Attack
🇳🇱
Site.eu
2025-08-14 00:19:34
UTC ·
(1 year ago)
Excessive multi-domain requests
Brute-Force
🇭🇺
NyaljBe
2025-08-11 06:27:00
UTC ·
(1 year ago)
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /cc.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] " ...
show more
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /cc.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-conflg.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /wp-content/plugins/about.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - - [09/Aug/2025:12:28:58 +0200] "GET /buy.php HTTP/1.1" 404 153
show less
Web App Attack
🇦🇺
artful
2025-08-10 07:26:00
UTC ·
(1 year ago)
Excess Errors
Web App Attack
🇨🇭
backslash
2025-08-10 05:24:44
UTC ·
(1 year ago)
DDoS Attack
🇭🇺
DumaNet
2025-08-10 05:19:00
UTC ·
(1 year ago)
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:54:28
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2 ...
show more
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:54:28
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-admin/about.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /aa.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-class.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /wp-theme.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:28 +0200] "GET /defaults.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:27 +0200] "GET /v.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:27 +0200] "GET /css/admin.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:54:27 +0200] "GET /wp
show less
Hacking
Web App Attack
🇭🇺
DumaNet
2025-08-10 04:58:00
UTC ·
(1 year ago)
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:45:56
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "G ...
show more
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:45:56
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /edit.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /wp-content/languages/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /about.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /themes/zMousse/otuz1.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /style.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /wp-content/themes/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /file.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:45:56 +0200] "GET /wp-signin.php HTTP/1.1" 404 153 "-" "-"
show less
Hacking
Web App Attack
🇭🇺
DumaNet
2025-08-10 04:36:00
UTC ·
(1 year ago)
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:36:00
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/202 ...
show more
WordPress plugin attack attempts.
Date: 2025 Aug 09. 11:36:00
Source IP: 40.87.158.154
Portion of the log(s):
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /wp-content/plugins/index.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /wp-admin/alfa.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /images/class-config.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /autoload_classmap.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:56 +0200] "GET /special.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:55 +0200] "GET /mah/function.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:55 +0200] "GET /admin.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:55 +0200] "GET /classwithtostring.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:55 +0200] "GET /flower.php HTTP/1.1" 404 153 "-" "-"
40.87.158.154 - [09/Aug/2025:11:35:55
show less
Hacking
Web App Attack
🇺🇸
mnsf
2025-08-09 22:05:24
UTC ·
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇫🇷
Murazaki
2025-08-09 22:00:15
UTC ·
(1 year ago)
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:24:59 +0200] "GET /wp-admin.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:25:00 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
im ...
show more
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:24:59 +0200] "GET /wp-admin.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:25:00 +0200] "GET /wp-login.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:25:05 +0200] "GET /wp-signup.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:25:06 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
imap.balamb.fr 40.87.158.154 - - [09/Aug/2025:01:25:09 +0200] "GET /mail.php HTTP/1.1" 404 153 "-" "-" "172.22.0.10:80"
...
show less
Bad Web Bot
🇩🇪
ger-stg-sifi1
2025-08-09 14:58:03
UTC ·
(1 year ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇸🇬
Cloudkul Cloudkul
2025-08-09 14:25:26
UTC ·
(1 year ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇳🇱
BlueWire Hosting
2025-08-09 14:10:43
UTC ·
(1 year ago)
Probing for application vulnerabilities
Brute-Force
Web App Attack
Anonymous
2025-08-09 13:45:28
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇺🇸
agenciahypelab.com.br
2025-08-09 13:40:05
UTC ·
(1 year ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH