🇫🇷
Safronus
2026-06-01 19:11:44
(3 days ago)
Banned by fail2ban jail=nginx-noscript match=$f2bV_matches
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-06-01 19:05:02
(3 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2026-06-01 19:04:46
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Webshell probing, Malicious User-Agent
show less
Bad Web Bot
Web App Attack
🇩🇪
joharikop
2026-06-01 18:53:33
(3 days ago)
Exploit scanning detected by fail2ban on nginx reverse proxy (wp-admin, .env, shell probes, phpmyadm ...
show more
Exploit scanning detected by fail2ban on nginx reverse proxy (wp-admin, .env, shell probes, phpmyadmin)
show less
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-06-01 18:53:15
(3 days ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇺🇸
Operator873
2026-06-01 18:37:14
(3 days ago)
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, ser ...
show more
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "mailadmin.ntars.net"
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, server: [OBFUSCATED], request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "mailadmin.ntars.net"
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, server: [OBFUSCATED], request: "GET /error.php HTTP/1.1", host: "mailadmin.ntars.net"
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, server: [OBFUSCATED], request: "GET /error.php HTTP/1.1", host: "mailadmin.ntars.net"
2026/06/01 13:37:12 [error] 2076233#0: *3546965 access forbidden by rule, client: 52.176.22.166, server: [OBFUSCATED], request: "GET /wpo.php HTTP/1.1", host: "mailadmin.ntars
...
show less
Brute-Force
Web App Attack
🇺🇸
antlac1
2026-06-01 18:34:29
(3 days ago)
crowdsecurity/http-backdoors-attempts
Brute-Force
Web App Attack
🇩🇪
pscriptos
2026-06-01 18:33:32
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
helios.live
2026-06-01 18:17:18
(3 days ago)
2026/06/01 18:17:17 [error] 2760965#2760965: *1538121 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/06/01 18:17:17 [error] 2760965#2760965: *1538121 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.176.22.166, server: staging.kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-staging.sock:", host: "staging.kocerroxy.com"
2026/06/01 18:17:17 [error] 2760965#2760965: *1538121 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.176.22.166, server: staging.kocerroxy.com, request: "GET /error.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-staging.sock:", host: "staging.kocerroxy.com"
2026/06/01 18:17:17 [error] 2760965#2760965: *1538121 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.176.22.166, server: staging.kocerroxy.com, request: "GET /wpo.php HTTP/2.0", upstream: "fastcgi://unix:/var/run/php/php8.3-fpm-staging
...
show less
Web App Attack
🇺🇸
abenage
2026-06-01 18:07:16
(3 days ago)
52.176.22.166 - - [01/Jun/2026:12:07:15 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
52.176.22.166 - - [01/Jun/2026:12:07:15 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-"
show less
Bad Web Bot
Web App Attack
2026-06-01 18:02:13
(3 days ago)
Web attack
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-06-01 18:00:04
(3 days ago)
Detected wp_admin attack from WP-host.
Hacking
Web App Attack
🇩🇪
raph
2026-06-01 17:59:02
(3 days ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇺🇸
WellSpring
2026-06-01 17:56:34
(3 days ago)
Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/p ...
show more
Automated probe detected by Ody Sentinel / WellSpr.ing. Type: wordpress_content. Path: /wp-content/plugins/hellopress/wp_filemanager.php. Auto-blocked after threshold exceeded. Dossier: https://wellspr.ing/dossier/sentinel-52-176-22-166
show less
Web App Attack
🇳🇿
Antinson
2026-06-01 17:54:11
(3 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot