๐ฌ๐ท
setupgr
2026-06-25 15:50:31
(16 minutes ago)
(mod_security) mod_security (id:1000001) triggered by 52.178.175.225 (-): 1 in the last 86400 secs; ...
show more
(mod_security) mod_security (id:1000001) triggered by 52.178.175.225 (-): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 18:50:30.334345 2026] [security2:error] [pid 357904:tid 358006] [client 52.178.175.225:10180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-content/plugins/hellopress/wp_filemanager.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/hellopress/wp_filemanager.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.endoscope.gr"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aj1ORko5pHjF0H7EeFOW5gAAAFM"]
show less
Port Scan
๐ซ๐ท
solution.it
2026-06-25 15:40:18
(26 minutes ago)
[Thu Jun 25 17:40:17.248371 2026] [php7:error] [pid 2729338:tid 2729338] [client 52.178.175.225:3083 ...
show more
[Thu Jun 25 17:40:17.248371 2026] [php7:error] [pid 2729338:tid 2729338] [client 52.178.175.225:30832] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat
show less
Web App Attack
๐ฎ๐ณ
dineshskt4all
2026-06-25 15:26:50
(39 minutes ago)
[Thu Jun 25 15:26:48.304024 2026] [proxy_fcgi:error] [pid 2321054:tid 138343832606400] [client 52.17 ...
show more
[Thu Jun 25 15:26:48.304024 2026] [proxy_fcgi:error] [pid 2321054:tid 138343832606400] [client 52.178.175.225:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
๐บ๐ธ
kosada.com
2026-06-25 15:18:38
(48 minutes ago)
Web vulnerability probing: /this_is_a_new_hello_world.php
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-25 15:16:51
(49 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
Anonymous
2026-06-25 15:09:34
(57 minutes ago)
52.178.175.225 - - [25/Jun/2026:15:09:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.175.225 - - [25/Jun/2026:15:09:34 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 509 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
KiekerJan
2026-06-25 15:09:22
(57 minutes ago)
52.178.175.225 - - [25/Jun/2026:17:09:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.175.225 - - [25/Jun/2026:17:09:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-"
52.178.175.225 - - [25/Jun/2026:17:09:22 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-"
...
show less
Web App Attack
๐ท๐บ
DZBOT
2026-06-25 15:07:39
(59 minutes ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ฎ๐ช
Coolnagour
2026-06-25 15:05:31
(1 hour ago)
http-probing: /this_is_a_new_hello_world.php
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-06-25 14:49:49
(1 hour ago)
[Thu Jun 25 15:49:46.731912 2026] [proxy_fcgi:error] [pid 1152561:tid 139822750684736] [client 52.17 ...
show more
[Thu Jun 25 15:49:46.731912 2026] [proxy_fcgi:error] [pid 1152561:tid 139822750684736] [client 52.178.175.225:31086] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:49:47.518094 2026] [proxy_fcgi:error] [pid 1152561:tid 139822759077440] [client 52.178.175.225:31086] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:49:48.505032 2026] [proxy_fcgi:error] [pid 1152561:tid 139821175531072] [client 52.178.175.225:31086] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:49:48.802829 2026] [proxy_fcgi:error] [pid 1152561:tid 139822784255552] [client 52.178.175.225:31086] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:49:48.903056 2026] [proxy_fcgi:error] [pid 1152561:tid 139822750684736] [client 52.178.175.225:31086] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
๐ซ๐ฎ
kumiko
2026-06-25 14:44:51
(1 hour ago)
[2026-06-25 17:44:50] Apache auth failure: brute force attempt, file probing
Brute-Force
Bad Web Bot
๐ต๐ฑ
nfsec.pl
2026-06-25 14:39:45
(1 hour ago)
52.178.175.225 - - [25/Jun/2026:14:39:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.175.225 - - [25/Jun/2026:14:39:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 387 "-" "-"
52.178.175.225 - - [25/Jun/2026:14:39:44 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 387 "-" "-"
52.178.175.225 - - [25/Jun/2026:14:39:44 +0000] "GET /x.php HTTP/1.1" 403 387 "-" "-"
52.178.175.225 - - [25/Jun/2026:14:39:44 +0000] "GET /wss.php HTTP/1.1" 403 387 "-" "-"
52.178.175.225 - - [25/Jun/2026:14:39:45 +0000] "GET /ty.php?p= HTTP/1.1" 403 387 "-" "-"
...
show less
Web App Attack
Exploited Host
Anonymous
2026-06-25 14:37:51
(1 hour ago)
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 299 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 448 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 299 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 448 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /x.php HTTP/1.1" 404 299 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:47 +0200] "GET /x.php HTTP/1.1" 404 448 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:48 +0200] "GET /wss.php HTTP/1.1" 404 299 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:48 +0200] "GET /wss.php HTTP/1.1" 404 448 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:48 +0200] "GET /ty.php?p= HTTP/1.1" 404 299 "-" "-"
52.178.175.225 - - [25/Jun/2026:16:37:48 +0200] "GET /ty.php?p= HTTP/1.1" 404 448 "-
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Roderic
2026-06-25 14:36:03
(1 hour ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
Port Scan
๐ซ๐ฎ
Christopher Hughes
2026-06-25 14:29:40
(1 hour ago)
[Thu Jun 25 15:29:38.552623 2026] [proxy_fcgi:error] [pid 1152561:tid 139822750684736] [client 52.17 ...
show more
[Thu Jun 25 15:29:38.552623 2026] [proxy_fcgi:error] [pid 1152561:tid 139822750684736] [client 52.178.175.225:31043] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:29:38.804674 2026] [proxy_fcgi:error] [pid 1152561:tid 139822784255552] [client 52.178.175.225:31043] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:29:39.483203 2026] [proxy_fcgi:error] [pid 1152561:tid 139822767470144] [client 52.178.175.225:31043] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:29:39.579141 2026] [proxy_fcgi:error] [pid 1152561:tid 139822249272896] [client 52.178.175.225:31043] AH01071: Got error 'Primary script unknown'
[Thu Jun 25 15:29:39.669054 2026] [proxy_fcgi:error] [pid 1152561:tid 139822257665600] [client 52.178.175.225:31043] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack