🇬🇧
openstrike.co.uk
2025-09-09 05:13:46
UTC ·
(1 year ago)
20 attacks on PHP URLs:
GET /ioxi-o.php HTTP/1.1
Web App Attack
🇩🇪
Vegascosmetics
2025-09-08 21:55:11
UTC ·
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸
mnsf
2025-09-08 20:05:07
UTC ·
(1 year ago)
Too many Status 40X (16)
Brute-Force
Web App Attack
🇧🇪
Ivo Vynckier
2025-09-08 16:31:00
UTC ·
(1 year ago)
52.231.15.28 - - [07/Sep/2025:20:46:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6263 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:35 +0200] "GET /ss.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46: ...
show more
52.231.15.28 - - [07/Sep/2025:20:46:35 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 6263 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:35 +0200] "GET /ss.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:36 +0200] "GET /z.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:36 +0200] "GET /wsr2.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:37 +0200] "GET /cfile.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:37 +0200] "GET /ffile.php HTTP/1.1" 404 27 "-" "-"
52.231.15.28 - - [07/Sep/2025:20:46:38 +0200] "GET /wp-update.php HTTP/1.1" 404 27 "-" "-"
show less
Web App Attack
🇩🇪
ps-center
2025-09-08 12:41:18
UTC ·
(1 year ago)
SS1: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-09-08 12:09:59
UTC ·
(1 year ago)
52.231.15.28 - - [08/Sep/2025:15:01:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 277 "-" "-"
52.231.15.28 - - [08/Sep/2025:15:09:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 274 "-" ...
show more
52.231.15.28 - - [08/Sep/2025:15:01:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 277 "-" "-"
52.231.15.28 - - [08/Sep/2025:15:09:59 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 274 "-" "-"
...
show less
Web App Attack
🇩🇪
KiekerJan
2025-09-08 11:31:32
UTC ·
(1 year ago)
52.231.15.28 - - [08/Sep/2025:13:31:30 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-"
52.231.15.28 - - [08/Sep/2025:13:31:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" ...
show more
52.231.15.28 - - [08/Sep/2025:13:31:30 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-"
52.231.15.28 - - [08/Sep/2025:13:31:31 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-"
...
show less
Web App Attack
🇩🇪
iNetWorker
2025-09-08 11:25:28
UTC ·
(1 year ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
lavnet.net
2025-09-08 10:59:45
UTC ·
(1 year ago)
52.231.15.28 - - [08/Sep/2025:10:59:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 9195 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:43 +0000] "GET /TX99gTdSBBFr.php HTTP/1.1" 404 9125 "-" "-"
52.231.15.28 - - [08/Sep/2 ...
show more
52.231.15.28 - - [08/Sep/2025:10:59:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 9195 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:43 +0000] "GET /TX99gTdSBBFr.php HTTP/1.1" 404 9125 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:44 +0000] "GET /aa8.php HTTP/1.1" 404 9116 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:44 +0000] "GET /lock360.php HTTP/1.1" 404 9120 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:44 +0000] "GET /nxx.php HTTP/1.1" 404 9116 "-" "-"
52.231.15.28 - - [08/Sep/2025:10:59:44 +0000] "GET /claa.php HTTP/1.1" 404 9117 "-" "-"
...
show less
Brute-Force
Anonymous
2025-09-08 10:52:51
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇮🇩
Burayot
2025-09-08 10:36:15
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 52.231.15.28 (KR/South Korea/-): 2 in the last 3600 secs
Web App Attack
🇫🇮
Christopher Hughes
2025-09-08 10:18:55
UTC ·
(1 year ago)
[Mon Sep 08 11:18:54.342662 2025] [proxy_fcgi:error] [pid 3517582:tid 140345136363072] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 11:18:54.585658 2025] [proxy_fcgi:error] [pid 3517582:tid 140345169933888] [clie ...
show more
[Mon Sep 08 11:18:54.342662 2025] [proxy_fcgi:error] [pid 3517582:tid 140345136363072] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 11:18:54.585658 2025] [proxy_fcgi:error] [pid 3517582:tid 140345169933888] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 11:18:54.828423 2025] [proxy_fcgi:error] [pid 3517582:tid 140345127970368] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 11:18:55.070315 2025] [proxy_fcgi:error] [pid 3517582:tid 140345161541184] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 11:18:55.313344 2025] [proxy_fcgi:error] [pid 3517582:tid 140346176566848] [client 52.231.15.28:6458] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2025-09-08 09:44:42
UTC ·
(1 year ago)
[Mon Sep 08 10:44:41.078407 2025] [proxy_fcgi:error] [pid 3517582:tid 140345153148480] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 10:44:41.320662 2025] [proxy_fcgi:error] [pid 3517582:tid 140346151388736] [clie ...
show more
[Mon Sep 08 10:44:41.078407 2025] [proxy_fcgi:error] [pid 3517582:tid 140345153148480] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 10:44:41.320662 2025] [proxy_fcgi:error] [pid 3517582:tid 140346151388736] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 10:44:41.564021 2025] [proxy_fcgi:error] [pid 3517582:tid 140345136363072] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 10:44:41.807956 2025] [proxy_fcgi:error] [pid 3517582:tid 140345882953280] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 10:44:42.051254 2025] [proxy_fcgi:error] [pid 3517582:tid 140344565954112] [client 52.231.15.28:4421] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
🇳🇱
CryptoYakari
2025-09-08 09:40:08
UTC ·
(1 year ago)
[Mon Sep 08 12:40:06.507572 2025] [proxy_fcgi:error] [pid 4009390:tid 4009425] [client 52.231.15.28:0] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 12:40:06.797339 2025] [proxy_fcgi:error] [pid 4009389:tid 4009421] [client 52.231.15.28:0] ...
show more
[Mon Sep 08 12:40:06.507572 2025] [proxy_fcgi:error] [pid 4009390:tid 4009425] [client 52.231.15.28:0] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 12:40:06.797339 2025] [proxy_fcgi:error] [pid 4009389:tid 4009421] [client 52.231.15.28:0] AH01071: Got error 'Primary script unknown'
[Mon Sep 08 12:40:07.085550 2025] [proxy_fcgi:error] [pid 4009390:tid 4009413] [client 52.231.15.28:0] AH01071: Got error 'Primary script unknown'
...
show less
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇩🇪
0x44
2025-09-08 09:28:39
UTC ·
(1 year ago)
52.231.15.28 [08/Sep/2025] * Spam host detected, probing for vulnerabilities
Web Spam
Exploited Host
Web App Attack