🇻🇳
171.231.185.127
22 hours ago
2026-08-16T00:47:50.521584+00:00 kocer-main-webserver sshd[779132]: Invalid user system from 171.231 ...
show more
2026-08-16T00:47:50.521584+00:00 kocer-main-webserver sshd[779132]: Invalid user system from 171.231.185.127 port 53854
2026-08-16T00:47:50.922259+00:00 kocer-main-webserver sshd[779132]: Connection closed by invalid user system 171.231.185.127 port 53854 [preauth]
2026-08-16T00:49:54.896228+00:00 kocer-main-webserver sshd[779310]: Invalid user guest from 171.231.185.127 port 53156
...
show less
Brute-Force
SSH
🇻🇳
171.231.185.127
23 hours ago
2026-08-16T00:20:24.494660+00:00 kocer-main-webserver sshd[776258]: Invalid user admin from 171.231. ...
show more
2026-08-16T00:20:24.494660+00:00 kocer-main-webserver sshd[776258]: Invalid user admin from 171.231.185.127 port 36028
2026-08-16T00:20:24.737209+00:00 kocer-main-webserver sshd[776258]: Connection closed by invalid user admin 171.231.185.127 port 36028 [preauth]
2026-08-16T00:26:06.012031+00:00 kocer-main-webserver sshd[776789]: Invalid user user from 171.231.185.127 port 33080
...
show less
Brute-Force
SSH
🇻🇳
27.79.3.148
23 hours ago
2026-08-16T00:19:28.188471+00:00 kocer-main-webserver sshd[776150]: Invalid user admin from 27.79.3. ...
show more
2026-08-16T00:19:28.188471+00:00 kocer-main-webserver sshd[776150]: Invalid user admin from 27.79.3.148 port 55224
2026-08-16T00:19:28.500058+00:00 kocer-main-webserver sshd[776150]: Connection closed by invalid user admin 27.79.3.148 port 55224 [preauth]
2026-08-16T00:23:20.469851+00:00 kocer-main-webserver sshd[776521]: Connection closed by authenticating user root 27.79.3.148 port 43296 [preauth]
...
show less
Brute-Force
SSH
🇰🇷
52.141.58.175
23 hours ago
2026/08/16 00:02:25 [error] 773658#773658: *40153 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/16 00:02:25 [error] 773658#773658: *40153 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.141.58.175, server: kocerroxy.com, request: "GET /aa.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/08/16 00:02:25 [error] 773658#773658: *40153 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 52.141.58.175, server: kocerroxy.com, request: "GET /abcd.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
52.141.58.175 - - [16/Aug/2026:00:02:25 +0000] "GET /aa.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
52.141.58.175 - - [16/Aug/2026:00:02:25 +0000] "GET /abcd.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko
...
show less
Web App Attack
🇵🇱
74.248.130.103
15 Aug 2026
74.248.130.103 - - [15/Aug/2026:23:48:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
74.248.130.103 - - [15/Aug/2026:23:48:36 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 23:48:36 [error] 770432#770432: *39067 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.130.103, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
2026/08/15 23:48:37 [error] 770432#770432: *39067 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.130.103, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
74.248.130.103 - - [15/Aug/2026:23:48:37 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 23:48:37 [error] 770432
...
show less
Web App Attack
🇧🇷
20.226.112.14
15 Aug 2026
2026/08/15 22:22:48 [error] 764172#764172: *33584 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 22:22:48 [error] 764172#764172: *33584 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.226.112.14, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.226.112.14 - - [15/Aug/2026:22:22:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 22:22:49 [error] 764172#764172: *33584 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.226.112.14, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.226.112.14 - - [15/Aug/2026:22:22:49 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 22:22:49 [error] 764172#764
...
show less
Web App Attack
🇮🇳
40.80.82.167
15 Aug 2026
2026/08/15 22:07:40 [error] 762091#762091: *32111 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 22:07:40 [error] 762091#762091: *32111 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 40.80.82.167, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
40.80.82.167 - - [15/Aug/2026:22:07:40 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 22:07:41 [error] 762091#762091: *32111 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 40.80.82.167, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
40.80.82.167 - - [15/Aug/2026:22:07:41 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 22:07:41 [error] 762091#762091: *32111 FastCGI sent i
...
show less
Web App Attack
🇧🇷
20.226.7.189
15 Aug 2026
2026/08/15 21:55:07 [error] 761665#761665: *31685 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 21:55:07 [error] 761665#761665: *31685 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.226.7.189, server: kocerroxy.com, request: "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.226.7.189 - - [15/Aug/2026:21:55:07 +0000] "GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/08/15 21:55:07 [error] 761665#761665: *31685 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.226.7.189, server: kocerroxy.com, request: "GET /wp-content/themes/wp-pridmag/layout.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.226.7.189 - - [15/Aug/2026:21:55:07 +0000] "GET /wp-content/themes/wp-prid
...
show less
Web App Attack
🇵🇱
74.248.18.37
15 Aug 2026
2026/08/15 21:23:53 [error] 758277#758277: *29576 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 21:23:53 [error] 758277#758277: *29576 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.18.37, server: kocerroxy.com, request: "GET /--wp-lgj.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
74.248.18.37 - - [15/Aug/2026:21:23:53 +0000] "GET /--wp-lgj.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/08/15 21:23:53 [error] 758277#758277: *29576 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 74.248.18.37, server: kocerroxy.com, request: "GET /.info.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
74.248.18.37 - - [15/Aug/2026:21:23:53 +0000] "GET /.info.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
...
show less
Web App Attack
🇯🇵
45.76.205.254
15 Aug 2026
2026/08/15 21:10:21 [error] 757592#757592: *28558 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 21:10:21 [error] 757592#757592: *28558 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 45.76.205.254, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "https://kocerroxy.com/administrator/"
45.76.205.254 - - [15/Aug/2026:21:10:21 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "https://kocerroxy.com/administrator/" "Mozilla/5.0 (X11; Linux x86_44) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/123.0.6312.118 Safari/534.26 XiaoMi/MiuiBrowser/14.26.1-gn"
2026/08/15 21:10:24 [error] 757592#757592: *28558 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 45.76.205.254, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
45.76.205.254 -
...
show less
Web App Attack
🇳🇱
217.122.169.71
15 Aug 2026
2026/08/15 21:09:55 [error] 757099#757099: *28516 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 21:09:55 [error] 757099#757099: *28516 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 217.122.169.71, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
217.122.169.71 - - [15/Aug/2026:21:09:55 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0"
2026/08/15 21:09:56 [error] 757099#757099: *28516 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 217.122.169.71, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
217.122.169.71 - - [15/Aug/2026:21:09:56 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) Gecko/20100101 F
...
show less
Web App Attack
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T20:38:23.116061+00:00 kocer-main-webserver sshd[754415]: Invalid user admin from 202.189. ...
show more
2026-08-15T20:38:23.116061+00:00 kocer-main-webserver sshd[754415]: Invalid user admin from 202.189.4.115 port 62410
2026-08-15T20:38:23.362421+00:00 kocer-main-webserver sshd[754415]: Disconnected from invalid user admin 202.189.4.115 port 62410 [preauth]
2026-08-15T20:39:12.703908+00:00 kocer-main-webserver sshd[754634]: Invalid user admin from 202.189.4.115 port 61929
...
show less
Brute-Force
SSH
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T20:15:14.373193+00:00 kocer-main-webserver sshd[752147]: Connection closed by 202.189.4.1 ...
show more
2026-08-15T20:15:14.373193+00:00 kocer-main-webserver sshd[752147]: Connection closed by 202.189.4.115 port 61719 [preauth]
2026-08-15T20:15:25.717663+00:00 kocer-main-webserver sshd[752303]: Invalid user admin from 202.189.4.115 port 62605
2026-08-15T20:15:25.936131+00:00 kocer-main-webserver sshd[752303]: Disconnected from invalid user admin 202.189.4.115 port 62605 [preauth]
...
show less
Brute-Force
SSH
🇩🇪
20.79.204.6
15 Aug 2026
2026/08/15 19:53:55 [error] 748552#748552: *22637 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 19:53:55 [error] 748552#748552: *22637 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.79.204.6, server: kocerroxy.com, request: "GET /abcd.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.79.204.6 - - [15/Aug/2026:19:53:55 +0000] "GET /abcd.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/08/15 19:53:55 [error] 748552#748552: *22637 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.79.204.6, server: kocerroxy.com, request: "GET /about.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.79.204.6 - - [15/Aug/2026:19:53:55 +0000] "GET /about.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Web App Attack
🇨🇦
20.151.128.234
15 Aug 2026
2026/08/15 19:32:15 [error] 746272#746272: *21076 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 19:32:15 [error] 746272#746272: *21076 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.151.128.234, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.151.128.234 - - [15/Aug/2026:19:32:15 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 19:32:15 [error] 746272#746272: *21076 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.151.128.234, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.151.128.234 - - [15/Aug/2026:19:32:15 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 19:32:15 [error] 746272#746272: *21076 FastCG
...
show less
Web App Attack
🇰🇷
20.196.200.88
15 Aug 2026
2026/08/15 18:55:26 [error] 743796#743796: *18638 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 18:55:26 [error] 743796#743796: *18638 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.196.200.88, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.196.200.88 - - [15/Aug/2026:18:55:26 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 18:55:27 [error] 743796#743796: *18641 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.196.200.88, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.196.200.88 - - [15/Aug/2026:18:55:27 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 18:55:27 [error] 743796#743796: *18641 FastCGI se
...
show less
Web App Attack
🇸🇪
4.223.164.152
15 Aug 2026
2026/08/15 18:47:11 [error] 742365#742365: *17988 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 18:47:11 [error] 742365#742365: *17988 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 4.223.164.152, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
4.223.164.152 - - [15/Aug/2026:18:47:11 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 18:47:11 [error] 742365#742365: *17988 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 4.223.164.152, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
4.223.164.152 - - [15/Aug/2026:18:47:11 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 18:47:11 [error] 742365#742
...
show less
Web App Attack
🇺🇸
34.145.105.100
15 Aug 2026
2026/08/15 18:26:45 [error] 740388#740388: *16326 access forbidden by rule, client: 34.145.105.100, ...
show more
2026/08/15 18:26:45 [error] 740388#740388: *16326 access forbidden by rule, client: 34.145.105.100, server: kocerroxy.com, request: "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1", host: "adminpanel.kocerroxy.com"
2026/08/15 18:26:45 [error] 740388#740388: *16220 access forbidden by rule, client: 34.145.105.100, server: kocerroxy.com, request: "GET /@fs/.env.production?raw?? HTTP/1.1", host: "adminpanel.kocerroxy.com"
2026/08/15 18:26:45 [error] 740388#740388: *16220 access forbidden by rule, client: 34.145.105.100, server: kocerroxy.com, request: "GET /@fs/var/www/html/.aws/credentials?raw?? HTTP/1.1", host: "adminpanel.kocerroxy.com"
2026/08/15 18:26:45 [error] 740388#740388: *16326 access forbidden by rule, client: 34.145.105.100, server: kocerroxy.com, request: "GET /@fs/home/node/.aws/credentials?raw?? HTTP/1.1", host: "adminpanel.kocerroxy.com"
2026/08/15 18:26:45 [error] 740388#740388: *16326 access forbidden by rule, client: 34.145.105.100, server
...
show less
Web App Attack
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T18:17:52.577498+00:00 kocer-main-webserver sshd[740929]: Invalid user ubuntu from 202.189 ...
show more
2026-08-15T18:17:52.577498+00:00 kocer-main-webserver sshd[740929]: Invalid user ubuntu from 202.189.4.115 port 63406
2026-08-15T18:17:52.794313+00:00 kocer-main-webserver sshd[740929]: Disconnected from invalid user ubuntu 202.189.4.115 port 63406 [preauth]
2026-08-15T18:18:39.274805+00:00 kocer-main-webserver sshd[740997]: Invalid user ubuntu from 202.189.4.115 port 57108
...
show less
Brute-Force
SSH
🇰🇷
220.122.188.79
15 Aug 2026
2026/08/15 18:11:43 [error] 739006#739006: *15432 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 18:11:43 [error] 739006#739006: *15432 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 220.122.188.79, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "https://kocerroxy.com/administrator/"
220.122.188.79 - - [15/Aug/2026:18:11:43 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "https://kocerroxy.com/administrator/" "Mozilla/5.0 (Linux; Android 13; V2202 Build/TP1A.220624.014_IN; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.6 Chrome/132.0.6834.163 Mobile Safari/537.56"
2026/08/15 18:11:46 [error] 739006#739006: *15432 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 220.122.188.79, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "ko
...
show less
Web App Attack
🇨🇭
172.161.0.2
15 Aug 2026
2026/08/15 17:58:02 [error] 737591#737591: *14626 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 17:58:02 [error] 737591#737591: *14626 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.161.0.2, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/08/15 17:58:02 [error] 737591#737591: *14626 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.161.0.2, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
2026/08/15 17:58:02 [error] 737591#737591: *14626 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 172.161.0.2, server: kocerroxy.com, request: "GET /--wp-lgj.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:
...
show less
Web App Attack
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T17:54:30.552268+00:00 kocer-main-webserver sshd[738498]: Connection closed by 202.189.4.1 ...
show more
2026-08-15T17:54:30.552268+00:00 kocer-main-webserver sshd[738498]: Connection closed by 202.189.4.115 port 62060 [preauth]
2026-08-15T17:54:35.552701+00:00 kocer-main-webserver sshd[738676]: Invalid user ubuntu from 202.189.4.115 port 55131
2026-08-15T17:54:35.797919+00:00 kocer-main-webserver sshd[738676]: Disconnected from invalid user ubuntu 202.189.4.115 port 55131 [preauth]
...
show less
Brute-Force
SSH
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T17:06:45.974028+00:00 kocer-main-webserver sshd[734058]: Invalid user ubuntu from 202.189 ...
show more
2026-08-15T17:06:45.974028+00:00 kocer-main-webserver sshd[734058]: Invalid user ubuntu from 202.189.4.115 port 63351
2026-08-15T17:06:46.224796+00:00 kocer-main-webserver sshd[734058]: Disconnected from invalid user ubuntu 202.189.4.115 port 63351 [preauth]
2026-08-15T17:07:35.763242+00:00 kocer-main-webserver sshd[734131]: Invalid user ubuntu from 202.189.4.115 port 62413
...
show less
Brute-Force
SSH
🇸🇪
135.225.75.187
15 Aug 2026
2026/08/15 17:05:09 [error] 733432#733432: *11480 FastCGI sent in stderr: "Primary script unknown" w ...
show more
2026/08/15 17:05:09 [error] 733432#733432: *11480 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 135.225.75.187, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
135.225.75.187 - - [15/Aug/2026:17:05:09 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 17:05:10 [error] 733432#733432: *11480 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 135.225.75.187, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
135.225.75.187 - - [15/Aug/2026:17:05:10 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/08/15 17:05:10 [error] 733432#733432: *1129
...
show less
Web App Attack
🇨🇳
202.189.4.115
15 Aug 2026
2026-08-15T16:42:04.760301+00:00 kocer-main-webserver sshd[731550]: Connection reset by 202.189.4.11 ...
show more
2026-08-15T16:42:04.760301+00:00 kocer-main-webserver sshd[731550]: Connection reset by 202.189.4.115 port 61570 [preauth]
2026-08-15T16:42:29.359465+00:00 kocer-main-webserver sshd[731734]: Invalid user ubuntu from 202.189.4.115 port 49462
2026-08-15T16:42:30.674042+00:00 kocer-main-webserver sshd[731734]: Disconnected from invalid user ubuntu 202.189.4.115 port 49462 [preauth]
...
show less
Brute-Force
SSH