๐บ๐ธ
Epimetheus
2026-07-18 19:28:18
(5 minutes ago)
Unauthorized access attempts:
[GET] /wp-mail.php
[GET] /lufix.php
[GET] /error.php
[GET] /404.php
[ ...
show more
Unauthorized access attempts:
[GET] /wp-mail.php
[GET] /lufix.php
[GET] /error.php
[GET] /404.php
[GET] /simple.php
[GET] /this_is_a_new_hello_world.php
[GET] /wp-content/plugins/hellopress/wp_filemanager.php
UA: Unknown
show less
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-07-18 19:22:29
(11 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
kbeezie
2026-07-18 19:20:52
(12 minutes ago)
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /info.php HTTP/1.1" 429 162 "-" "-"
74.249.245. ...
show more
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /info.php HTTP/1.1" 429 162 "-" "-"
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /edit.php HTTP/1.1" 429 162 "-" "-"
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /leaf.php HTTP/1.1" 429 162 "-" "-"
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /8.php HTTP/1.1" 429 162 "-" "-"
74.249.245.134 - - [18/Jul/2026:15:20:51 -0400] "GET /fx.php HTTP/1.1" 429 162 "-" "-"
show less
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
soc-yk
2026-07-18 19:18:12
(15 minutes ago)
Type: web_scanning
Risk: 85
Events: 954
Evidence:
- Automated hostile web probing detected
- Repeat ...
show more
Type: web_scanning
Risk: 85
Events: 954
Evidence:
- Automated hostile web probing detected
- Repeated web scanning activity observed
- Multi-event operational persistence identified
show less
Web App Attack
๐บ๐ธ
deskpass.com
2026-07-18 19:12:20
(21 minutes ago)
GET /class.php
Web App Attack
๐ฏ๐ต
ki3
2026-07-18 19:10:40
(23 minutes ago)
Fail2Ban: Web App Attacks and Forum Spam 74.249.245.134 1784401839.0(JST)
Web Spam
Bad Web Bot
Web App Attack
๐บ๐ธ
Rip
2026-07-18 19:10:05
(23 minutes ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
๐ฉ๐ช
hchristo
2026-07-18 19:01:54
(31 minutes ago)
[Sat Jul 18 21:01:53.025364 2026] [proxy_fcgi:error] [pid 54831:tid 54922] [client 74.249.245.134:55 ...
show more
[Sat Jul 18 21:01:53.025364 2026] [proxy_fcgi:error] [pid 54831:tid 54922] [client 74.249.245.134:5508] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 21:01:53.302909 2026] [proxy_fcgi:error] [pid 54831:tid 54885] [client 74.249.245.134:5508] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 21:01:53.595953 2026] [proxy_fcgi:error] [pid 54831:tid 54898] [client 74.249.245.134:5508] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 21:01:54.013337 2026] [proxy_fcgi:error] [pid 54831:tid 54884] [client 74.249.245.134:5508] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 21:01:54.251778 2026] [proxy_fcgi:error] [pid 54831:tid 54888] [client 74.249.245.134:5508] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
๐ฒ๐พ
Rizzy
2026-07-18 18:57:55
(35 minutes ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
netclix.gr
2026-07-18 18:46:54
(46 minutes ago)
(aggressive_scan) Aggressive Web Exploit Scan 74.249.245.134 (US/United States/-): 5 in the last 460 ...
show more
(aggressive_scan) Aggressive Web Exploit Scan 74.249.245.134 (US/United States/-): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 74.249.245.134 - - [18/Jul/2026:20:34:49 +0300] "GET /wp-config-sample.php HTTP/1.1" 403 146 "-" "-"
74.249.245.134 - - [18/Jul/2026:20:37:46 +0300] "GET /readme.php HTTP/1.1" 403 146 "-" "-"
74.249.245.134 - - [18/Jul/2026:20:38:22 +0300] "GET /wp-config.php HTTP/1.1" 403 146 "-" "-"
74.249.245.134 - - [18/Jul/2026:21:46:32 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 78495 "-" "-"
74.249.245.134 - - [18/Jul/2026:21:46:33 +0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 78495 "-" "-"
show less
Port Scan
๐ฉ๐ช
bryth
2026-07-18 18:43:54
(49 minutes ago)
Wordpress login/xmlrpc abuse (Sat Jul 18 06:26:53 PM UTC 2026)
Hacking
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-07-18 18:33:17
(1 hour ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฑ๐ป
garmtech.com
2026-07-18 18:32:18
(1 hour ago)
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ...
show more
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
Anonymous
2026-07-18 18:29:02
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐บ๐ธ
chrisj
2026-07-18 18:18:33
(1 hour ago)
[Sat Jul 18 18:18:31.805651 2026] [proxy_fcgi:error] [pid 214762:tid 214847] [client 74.249.245.134: ...
show more
[Sat Jul 18 18:18:31.805651 2026] [proxy_fcgi:error] [pid 214762:tid 214847] [client 74.249.245.134:32559] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 18:18:31.894185 2026] [proxy_fcgi:error] [pid 214762:tid 214848] [client 74.249.245.134:32559] AH01071: Got error 'Primary script unknown'
[Sat Jul 18 18:18:33.095333 2026] [proxy_fcgi:error] [pid 214762:tid 214852] [client 74.249.245.134:32559] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force