๐ซ๐ท
ecode hosting
2025-08-29 09:10:03
(1 year ago)
Domain : cozumdoktoru.com
Rule : config
2025-08-21 09:44:46 10.100.1.20 GET /wp-content/plugins/hell ...
show more
Domain : cozumdoktoru.com
Rule : config
2025-08-21 09:44:46 10.100.1.20 GET /wp-content/plugins/hellopress/wp_filemanager.php - 443 - 52.178.193.238 HTTP/1.1 - - cozumdoktoru.com 404 0 2 1384 90 124 - -
show less
Hacking
SQL Injection
๐ฉ๐ช
Vegascosmetics
2025-08-22 21:54:07
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
๐บ๐ธ
octageeks.com
2025-08-22 04:06:08
(1 year ago)
Wordpress malicious attack:[octascan]
Web App Attack
๐บ๐ธ
drodrig
2025-08-21 18:10:01
(1 year ago)
CrowdSec triggered: %!s(*string=0xc005bba0c0) (11 events)
Brute-Force
๐ต๐ฑ
sefinek.net
2025-08-21 17:22:32
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from IE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from IE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /akp.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ต๐ฑ
sefinek.net
2025-08-21 17:22:32
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from IE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from IE.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kwm4.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
rdpguard.com
2025-08-21 15:45:12
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ง๐ช
Ivo Vynckier
2025-08-21 15:43:00
(1 year ago)
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5550 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /asasx.php HTTP/1.1" 404 27 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /bolt.php HTTP/1.1" 404 27 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /zwso.php HTTP/1.1" 404 27 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /file.php HTTP/1.1" 404 27 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /wp-admin/index.php HTTP/1.1" 404 5550 "-" "-"
52.178.193.238 - - [21/Aug/2025:05:02:48 +0200] "GET /wp-includes/fonts/themes.php HTTP/1.1" 404 5550 "-" "-"
show less
Web App Attack
๐ฉ๐ช
ps-center
2025-08-21 15:26:07
(1 year ago)
C2: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ฌ๐ง
rakkor
2025-08-21 15:09:39
(1 year ago)
2025/08/21 16:09:37 [error] 12067#12067: *1626718 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2025/08/21 16:09:37 [error] 12067#12067: *1626718 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.178.193.238, server: , request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-925b669d-80ec-41dd-b8c8-bf5a26d831bf.sock:", host: "rakkor.uk"
...
show less
Hacking
Brute-Force
๐ฎ๐ฉ
zam
2025-08-21 14:50:54
(1 year ago)
52.178.193.238 - - [21/Aug/2025:14:50:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.178.193.238 - - [21/Aug/2025:14:50:46 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 9335
52.178.193.238 - - [21/Aug/2025:14:50:46 +0000] "GET /jp.php HTTP/1.1" 404 9335
52.178.193.238 - - [21/Aug/2025:14:50:47 +0000] "GET /orm.php HTTP/1.1" 404 9335
52.178.193.238 - - [21/Aug/2025:14:50:48 +0000] "GET /nx.php HTTP/1.1" 404 9335
52.178.193.238 - - [21/Aug/2025:14:50:48 +0000] "GET /php.php HTTP/1.1" 404 9335
show less
Web App Attack
๐ฆ๐บ
advena
2025-08-21 14:45:54
(1 year ago)
52.178.193.238 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-08-21T14:44:46Z after vi ...
show more
52.178.193.238 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-08-21T14:44:46Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge.
show less
Web Spam
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
todix
2025-08-21 14:25:29
(1 year ago)
WebAttack or semilar from 52.178.193.238
Web App Attack
๐ฎ๐น
IRT@Unisi
2025-08-21 13:42:46
(1 year ago)
Multiple web server 400 error codes from same source ip.
Bad Web Bot
๐ฆ๐บ
paulshipley.com.au
2025-08-21 13:40:55
(1 year ago)
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:29 +1000] "GET /jp.php HTTP/1.1" 40 ...
show more
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:29 +1000] "GET /jp.php HTTP/1.1" 404 97599 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:33 +1000] "GET /orm.php HTTP/1.1" 404 97607 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:36 +1000] "GET /nx.php HTTP/1.1" 404 97577 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:39 +1000] "GET /php.php HTTP/1.1" 404 97607 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:42 +1000] "GET /sx21_1.php HTTP/1.1" 404 97616 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:45 +1000] "GET /bluejackets.php HTTP/1.1" 404 97631 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:47 +1000] "GET /file17.php HTTP/1.1" 404 97616 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Aug/2025:23:39:50 +1000] "GET /pop.php HTTP/1.1" 404 97607 "-" "-"
levellagiftware.com.au:443 52.178.193.238 - - [21/Au
...
show less
Web App Attack