๐ณ๐ฑ
Alt255
2026-10-13 16:15:00
(6 minutes ago)
[live2bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[live2bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 74.225.146.100 - - [13/Oct/2026:18:14:43 +0200] "GET /adminer.php HTTP/1.1" 301 561 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-10-13 16:12:44
(8 minutes ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐ซ๐ฎ
KTSTechnology
2026-10-13 16:06:39
(14 minutes ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
๐ณ๐ด
Abuse Buster
2026-10-13 16:06:04
(15 minutes ago)
74.225.146.100 - - [13/Oct/2026:18:06:02 +0200] "GET /d.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windo ...
show more
74.225.146.100 - - [13/Oct/2026:18:06:02 +0200] "GET /d.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:18:06:02 +0200] "GET /data.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:18:06:02 +0200] "GET /database.php HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-13 15:56:40
(24 minutes ago)
[Tue Oct 13 16:56:38.976374 2026] [proxy_fcgi:error] [pid 1697089:tid 140238827529792] [client 74.22 ...
show more
[Tue Oct 13 16:56:38.976374 2026] [proxy_fcgi:error] [pid 1697089:tid 140238827529792] [client 74.225.146.100:18925] AH01071: Got error 'Primary script unknown'
[Tue Oct 13 16:56:39.139409 2026] [proxy_fcgi:error] [pid 1697089:tid 140239850948160] [client 74.225.146.100:18925] AH01071: Got error 'Primary script unknown'
[Tue Oct 13 16:56:39.302801 2026] [proxy_fcgi:error] [pid 1697089:tid 140239825770048] [client 74.225.146.100:18925] AH01071: Got error 'Primary script unknown'
[Tue Oct 13 16:56:39.465799 2026] [proxy_fcgi:error] [pid 1697089:tid 140238844315200] [client 74.225.146.100:18925] AH01071: Got error 'Primary script unknown'
[Tue Oct 13 16:56:39.629210 2026] [proxy_fcgi:error] [pid 1697089:tid 140238852707904] [client 74.225.146.100:18925] AH01071: Got error 'Primary script unknown'
...
show less
Web App Attack
๐บ๐ธ
daytonajrw
2026-10-13 15:50:36
(30 minutes ago)
Webshell/backdoor scanning: 216 GET requests in 70s (parallel), no User-Agent, status 301x129, 403x8 ...
show more
Webshell/backdoor scanning: 216 GET requests in 70s (parallel), no User-Agent, status 301x129, 403x87. Also probed: CMS/admin panels. Paths incl. /wp-content/plugins/hellopress/wp_filemanager.php, /wp-filemanager1.php, /wsoby.php, /makeasmtp.php, /this_is_a_new_hello_world.php, /index/function.php, /wp-trbacks.php, /wp-fgban13jx3.php
show less
Web App Attack
Bad Web Bot
Hacking
๐จ๐ฆ
Roper123
2026-10-13 15:49:56
(31 minutes ago)
Web exploits
Hacking
Web App Attack
๐ฉ๐ช
ramazan
2026-10-13 15:47:29
(34 minutes ago)
Fail2Ban: nginx-4xx | Failures: 3 | Log: /asus.php /asw.php
Web App Attack
Hacking
๐บ๐ธ
EmilGH
2026-10-13 15:44:09
(37 minutes ago)
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /locoy.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 ( ...
show more
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /locoy.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /mek.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /mek.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /mh.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:15:44:05 +0000] "GET /mh.php HTTP/1.1" 404 300 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2026-10-13 15:42:46
(38 minutes ago)
74.225.146.100 - - [13/Oct/2026:16:42:46 +0100] "GET /d.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Win ...
show more
74.225.146.100 - - [13/Oct/2026:16:42:46 +0100] "GET /d.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:16:42:46 +0100] "GET /data.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
74.225.146.100 - - [13/Oct/2026:16:42:47 +0100] "GET /database.php HTTP/1.1" 404 5590 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-10-13 15:40:21
(41 minutes ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
๐บ๐ธ
augustseo
2026-10-13 15:39:58
(41 minutes ago)
21 exploit-probe requests, each answered 403; 111 further requests refused after the ban between 202 ...
show more
21 exploit-probe requests, each answered 403; 111 further requests refused after the ban between 2026-10-13T15:38:50Z and 2026-10-13T15:39:58Z.
Signatures: server-script x20, wordpress x1
Paths: /admin.php /wp-content/themes/index.php /2.php /k.php /w.php /aa.php /g1.php /go.php
Query strings omitted. Timestamp is the last hit observed.
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
Lazarus
2026-10-13 15:38:39
(42 minutes ago)
HTTP probe.
Web App Attack
๐น๐ผ
tyetriiix
2026-10-13 15:33:41
(47 minutes ago)
Wazuh Alert Evidence: 74.225.146.100 - - [13/Oct/2026:15:33:38 +0000] "GET /wp-content/plugins/hello ...
show more
Wazuh Alert Evidence: 74.225.146.100 - - [13/Oct/2026:15:33:38 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฎ๐ฉ
soc-yk
2026-10-13 15:30:14
(51 minutes ago)
Type: web_scanning
Risk: 100
Events: 1955
Evidence:
- Automated hostile web probing detected
- Repe ...
show more
Type: web_scanning
Risk: 100
Events: 1955
Evidence:
- Automated hostile web probing detected
- Repeated web scanning activity observed
- Multi-event operational persistence identified
show less
Web App Attack