π±π»
garmtech.com
2026-09-25 04:51:31
(21 minutes ago)
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ...
show more
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
π«π·
francoisunix
2026-09-25 04:46:51
(26 minutes ago)
52.231.30.175 - - [25/Sep/2026:04:46:45 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.0" 403 146 " ...
show more
52.231.30.175 - - [25/Sep/2026:04:46:45 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.0" 403 146 "-" "-"
52.231.30.175 - - [25/Sep/2026:04:46:45 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.0" 403 146 "-" "-"
52.231.30.175 - - [25/Sep/2026:04:46:48 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.0" 403 146 "-" "-"
52.231.30.175 - - [25/Sep/2026:04:46:48 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.0" 403 146 "-" "-"
52.231.30.175 - - [25/Sep/2026:04:46:49 +0000] "GET /wp-content/uploads/ HTTP/1.0" 403 146 "-" "-"
...
show less
Web App Attack
π©πͺ
33three
2026-09-25 04:44:11
(29 minutes ago)
Fail2Ban jail WebAttack triggered
Brute-Force
π©πͺ
Jarda_H
2026-09-25 04:39:52
(33 minutes ago)
php-url-scan Attack Detected
Hacking
Web App Attack
π©πͺ
ramazan
2026-09-25 04:38:35
(34 minutes ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /01.php /1ac.php /40341.php /Cdefault.php /choco.php
Web App Attack
Hacking
πΊπΈ
kuroneko_omu
2026-09-25 04:32:17
(40 minutes ago)
Fail2Ban <webattack> jail detected 5 attempts against 52.231.30.175.
DDoS Attack
Hacking
Brute-Force
Web App Attack
π©πͺ
macrob
2026-09-25 04:20:24
(52 minutes ago)
2026/09/25 04:19:52 [error] 2823258#2823258: *33732438 access forbidden by rule, client: 52.231.30.1 ...
show more
2026/09/25 04:19:52 [error] 2823258#2823258: *33732438 access forbidden by rule, client: 52.231.30.175, server: binixo.co.za, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/2.0", host: "binixo.co.za"
2026/09/25 04:20:12 [error] 2823258#2823258: *33730368 access forbidden by rule, client: 52.231.30.175, server: binixo.co.za, request: "GET ///admin.php HTTP/2.0", host: "binixo.co.za"
2026/09/25 04:20:23 [error] 2823256#2823256: *33831738 access forbidden by rule, client: 52.231.30.175, server: binixo.co.za, request: "GET //admin.php HTTP/2.0", host: "binixo.co.za"
...
show less
Web App Attack
π©πͺ
hchristo
2026-09-25 04:20:23
(52 minutes ago)
[Fri Sep 25 06:20:20.800645 2026] [proxy_fcgi:error] [pid 22171:tid 22246] [client 52.231.30.175:595 ...
show more
[Fri Sep 25 06:20:20.800645 2026] [proxy_fcgi:error] [pid 22171:tid 22246] [client 52.231.30.175:59522] AH01071: Got error 'Primary script unknown'
[Fri Sep 25 06:20:21.280652 2026] [proxy_fcgi:error] [pid 22171:tid 22227] [client 52.231.30.175:59522] AH01071: Got error 'Primary script unknown'
[Fri Sep 25 06:20:21.760572 2026] [proxy_fcgi:error] [pid 22171:tid 22226] [client 52.231.30.175:59522] AH01071: Got error 'Primary script unknown'
[Fri Sep 25 06:20:22.250499 2026] [proxy_fcgi:error] [pid 22171:tid 22258] [client 52.231.30.175:59522] AH01071: Got error 'Primary script unknown'
[Fri Sep 25 06:20:22.728288 2026] [proxy_fcgi:error] [pid 22171:tid 22234] [client 52.231.30.175:59522] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
π©πͺ
svr
2026-09-25 04:08:24
(1 hour ago)
HC-Flood Web Scanner
Web App Attack
π§πͺ
Saec
2026-09-25 04:02:03
(1 hour ago)
Jarvis auto-ban: CF honeypot path /wp-content/themes/index.php (4Γ on saec.me)
Port Scan
Web App Attack
Anonymous
2026-09-25 03:55:11
(1 hour ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
π«π·
phoenix1jl96
2026-09-25 03:38:26
(1 hour ago)
2026/09/25 05:38:24 [error] 1353769#1353769: *228415 open() "/home/user-data/www/default/cgi-bin/ind ...
show more
2026/09/25 05:38:24 [error] 1353769#1353769: *228415 open() "/home/user-data/www/default/cgi-bin/index.php" failed (2: No such file or directory), client: 52.231.30.175, server: autodiscover.hvn-pbs.ledemon.us, request: "GET //cgi-bin/index.php HTTP/1.1", host: "autodiscover.hvn-pbs.ledemon.us"
2026/09/25 05:38:25 [error] 1353769#1353769: *228415 open() "/home/user-data/www/default/cgi-bin/admin.php" failed (2: No such file or directory), client: 52.231.30.175, server: autodiscover.hvn-pbs.ledemon.us, request: "GET //cgi-bin/admin.php HTTP/1.1", host: "autodiscover.hvn-pbs.ledemon.us"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
π§πͺ
boxed-it
2026-09-25 03:36:16
(1 hour ago)
GET /wp-content/plugins/hellopress/wp_filemanager.php (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
π΅π±
strefapi_com
2026-09-25 03:21:41
(1 hour ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
π§π·
Peregrine
2026-09-25 03:16:33
(1 hour ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 52.231.30.175 162.158.138.238 - - [23/Sep/2026:08:1 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 52.231.30.175 162.158.138.238 - - [23/Sep/2026:08:13:34 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193
show less
Bad Web Bot