🇩🇪
igerman
2026-04-23 19:39:20
UTC ·
(6 months ago)
caddy probes:
[wordpress] GET /wp-content/plugins/hellopress/wp_filemanager.php -> DROP
[web] GET /gpt-sh.php -> DROP
[web] GET /jp.php -> DROP
[web] GET /aevly.php -> DROP
[web] GET /ta0ol.php -> DROP
[web] GET /aligk.php -> DROP
[web] GET /users.ph ...
show more
caddy probes:
[wordpress] GET /wp-content/plugins/hellopress/wp_filemanager.php -> DROP
[web] GET /gpt-sh.php -> DROP
[web] GET /jp.php -> DROP
[web] GET /aevly.php -> DROP
[web] GET /ta0ol.php -> DROP
[web] GET /aligk.php -> DROP
[web] GET /users.php -> DROP
[web] GET /public/vx.php -> DROP
[web] GET /elp.php -> DROP
[web] GET /zc-243.php -> DROP
[web] GET /bkyac.php -> DROP
[web] GET /wziar1.php -> DROP
[web] GET /public/oLEzRVqmJJPFSucdefault.php -> DROP
[web] GET /7logs.php -> DROP
[web] GET /n3yUmQ6Q9xwQ8ocdefault.php -> DROP
[web] GET /as.php -> DROP
[web] GET /ctex1.php -> DROP
[web] GET /lb.php -> DROP
[web] GET /cilus.php -> DROP
[web] GET /mh.php -> DROP
[web] GET /fone1.php -> DROP
[web] GET /auth.php -> DROP
[web] GET /ortasekerli1.php -> DROP
[web] GET /about.php -> DROP
[wordpress] GET /wp-png.php -> DROP
show less
Web App Attack
🇳🇱
thedreamer.nl
2026-04-23 19:37:22
UTC ·
(6 months ago)
51.103.174.167 - - [23/Apr/2026:21:32:51 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CH" "Zurich" "47.36430" "8.54370"
51.103.174.167 - - [23/Apr/2026:21:32:52 +0200] "GET /wp-content/plugins/hellopress/wp_f ...
show more
51.103.174.167 - - [23/Apr/2026:21:32:51 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CH" "Zurich" "47.36430" "8.54370"
51.103.174.167 - - [23/Apr/2026:21:32:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CH" "Zurich" "47.36430" "8.54370"
51.103.174.167 - - [23/Apr/2026:21:32:55 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CH" "Zurich" "47.36430" "8.54370"
51.103.174.167 - - [23/Apr/2026:21:32:56 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 499 0 "-" "-" "CH" "Zurich" "47.36430" "8.54370"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
nfsec.pl
2026-04-23 19:24:36
UTC ·
(6 months ago)
51.103.174.167 - - [23/Apr/2026:19:24:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/2026:19:24:35 +0000] "GET /gpt-sh.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/202 ...
show more
51.103.174.167 - - [23/Apr/2026:19:24:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/2026:19:24:35 +0000] "GET /gpt-sh.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/2026:19:24:35 +0000] "GET /jp.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/2026:19:24:35 +0000] "GET /aevly.php HTTP/1.1" 403 387 "-" "-"
51.103.174.167 - - [23/Apr/2026:19:24:35 +0000] "GET /ta0ol.php HTTP/1.1" 403 387 "-" "-"
...
show less
Web App Attack
Exploited Host
🇺🇸
gamabe
2026-04-23 19:11:41
UTC ·
(6 months ago)
Detected crowdsecurity/http-wordpress-scan attack pattern. Reported by CrowdSec IDS.
Web App Attack
🇦🇺
paulshipley.com.au
2026-04-23 19:11:05
UTC ·
(6 months ago)
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:27 +1000] "GET /gpt-sh.php HTTP/1.1" 404 163407 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:30 +1000] "GET /jp.php HTTP/1.1" 404 163373 "-" "-"
levellap ...
show more
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:27 +1000] "GET /gpt-sh.php HTTP/1.1" 404 163407 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:30 +1000] "GET /jp.php HTTP/1.1" 404 163373 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:34 +1000] "GET /aevly.php HTTP/1.1" 404 163406 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:37 +1000] "GET /ta0ol.php HTTP/1.1" 404 163406 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:40 +1000] "GET /aligk.php HTTP/1.1" 404 163406 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:43 +1000] "GET /users.php HTTP/1.1" 404 163376 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:47 +1000] "GET /public/vx.php HTTP/1.1" 404 163411 "-" "-"
levellapromotions.com.au:443 51.103.174.167 - - [24/Apr/2026:05:09:50 +1000] "GET /elp.php HTTP/1.1" 404 163404 "-" "-"
levellapromotions.com.au
...
show less
Web App Attack
🇬🇧
myintarweb
2026-04-23 19:10:40
UTC ·
(6 months ago)
51.103.174.167 - - [23/Apr/2026:20:10:39 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1668 "-" "-"
...
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-04-23 18:59:31
UTC ·
(6 months ago)
Web App Attack
🇫🇷
lindi
2026-04-23 18:52:24
UTC ·
(6 months ago)
Probing for resource vulnerabilities
...
Web Spam
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
Cyber Crusader
2026-04-23 18:32:06
UTC ·
(6 months ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
🇺🇸
etu brutus
2026-04-23 18:28:44
UTC ·
(6 months ago)
51.103.174.167 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇩🇪
Progetto1
2026-04-23 18:26:02
UTC ·
(6 months ago)
Detected via HAProxyScanner at 2026-04-23 18:26:02 UTC on destination port WEB (80/443). Repeated scan / connection.
Port Scan
Hacking
Brute-Force
🇫🇷
Eldeberen
2026-04-23 18:26:00
UTC ·
(6 months ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
🇩🇪
pscriptos
2026-04-23 18:22:30
UTC ·
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
philipplindner
2026-04-23 18:19:34
UTC ·
(6 months ago)
Repeated unauthorized access attempts on www.philipp-lindner.de
Hacking
🇩🇪
itsolon
2026-04-23 18:08:19
UTC ·
(6 months ago)
[23/Apr/2026:20:08:18 +0200] 177696769852.281611 51.103.174.167 39506 217.154.7.177 443
[23/Apr/2026:20:08:18 +0200] 177696769890.279084 51.103.174.167 39522 217.154.7.177 80
[23/Apr/2026:20:08:19 +0200] 177696769957.443940 51.103.174.167 39506 217.1 ...
show more
[23/Apr/2026:20:08:18 +0200] 177696769852.281611 51.103.174.167 39506 217.154.7.177 443
[23/Apr/2026:20:08:18 +0200] 177696769890.279084 51.103.174.167 39522 217.154.7.177 80
[23/Apr/2026:20:08:19 +0200] 177696769957.443940 51.103.174.167 39506 217.154.7.177 443
[23/Apr/2026:20:08:19 +0200] 177696769967.289055 51.103.174.167 39522 217.154.7.177 80
[23/Apr/2026:20:08:19 +0200] 177696769942.455346 51.103.174.167 39506 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack