🇷🇺
185.50.25.47
04 Oct 2026
2026/10/04 07:20:56 [error] 3575692#3575692: *5616590 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 07:20:56 [error] 3575692#3575692: *5616590 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 185.50.25.47, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
185.50.25.47 - - [04/Oct/2026:07:20:56 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
2026/10/04 07:20:56 [error] 3575692#3575692: *5616590 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 185.50.25.47, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc
...
show less
Web App Attack
🇰🇷
20.194.30.107
04 Oct 2026
2026/10/04 06:52:06 [error] 3572339#3572339: *5613314 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 06:52:06 [error] 3572339#3572339: *5613314 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.30.107, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.194.30.107 - - [04/Oct/2026:06:52:06 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 06:52:06 [error] 3572339#3572339: *5613314 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.30.107, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.194.30.107 - - [04/Oct/2026:06:52:06 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 06:52:07 [error] 3572339#3572339: *561331
...
show less
Web App Attack
🇵🇸
213.6.72.106
04 Oct 2026
2026/10/04 06:19:20 [error] 3567661#3567661: *5611170 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 06:19:20 [error] 3567661#3567661: *5611170 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 213.6.72.106, server: kocerroxy.com, request: "GET /administrator/index.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "https://kocerroxy.com/administrator/"
213.6.72.106 - - [04/Oct/2026:06:19:20 +0000] "GET /administrator/index.php HTTP/1.1" 404 47 "https://kocerroxy.com/administrator/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.6723.105 YaBrowser/26.52.3.105.00 SA/3 Safari/537.36"
2026/10/04 06:19:21 [error] 3567661#3567661: *5611170 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 213.6.72.106, server: kocerroxy.com, request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
213.6.72.1
...
show less
Web App Attack
🇨🇳
47.93.192.43
04 Oct 2026
2026/10/04 05:32:36 [error] 3564865#3564865: *5607056 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 05:32:36 [error] 3564865#3564865: *5607056 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 47.93.192.43, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "http://kocerroxy.com/xmlrpc.php"
47.93.192.43 - - [04/Oct/2026:05:32:36 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0"
2026/10/04 05:32:37 [error] 3564865#3564865: *5607081 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 47.93.192.43, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com", referrer: "http://kocerroxy.com/xmlrpc.php"
47.93.192.43 -
...
show less
Web App Attack
🇩🇪
65.181.113.77
04 Oct 2026
2026/10/04 04:49:21 [error] 3563338#3563338: *5603467 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 04:49:21 [error] 3563338#3563338: *5603467 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 65.181.113.77, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
65.181.113.77 - - [04/Oct/2026:04:49:21 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0"
2026/10/04 04:49:22 [error] 3563338#3563338: *5603467 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 65.181.113.77, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
65.181.113.77 - - [04/Oct/2026:04:49
...
show less
Web App Attack
🇨🇳
43.138.60.111
04 Oct 2026
2026-10-04T04:12:58.176494+00:00 kocer-main-webserver sshd[3559875]: Invalid user admin from 43.138. ...
show more
2026-10-04T04:12:58.176494+00:00 kocer-main-webserver sshd[3559875]: Invalid user admin from 43.138.60.111 port 47842
2026-10-04T04:12:59.498615+00:00 kocer-main-webserver sshd[3559877]: Invalid user user1 from 43.138.60.111 port 47854
2026-10-04T04:13:01.187737+00:00 kocer-main-webserver sshd[3559881]: Invalid user ubuntu from 43.138.60.111 port 47856
...
show less
Brute-Force
SSH
🇭🇰
20.239.179.208
04 Oct 2026
2026/10/04 04:11:15 [error] 3557160#3557160: *5600429 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 04:11:15 [error] 3557160#3557160: *5600429 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.239.179.208, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.239.179.208 - - [04/Oct/2026:04:11:15 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 04:11:16 [error] 3557159#3557159: *5600534 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.239.179.208, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.239.179.208 - - [04/Oct/2026:04:11:16 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 04:11:17 [error
...
show less
Web App Attack
🇨🇳
43.138.60.111
04 Oct 2026
2026-10-04T03:48:31.353037+00:00 kocer-main-webserver sshd[3557426]: Invalid user dspace from 43.138 ...
show more
2026-10-04T03:48:31.353037+00:00 kocer-main-webserver sshd[3557426]: Invalid user dspace from 43.138.60.111 port 49568
2026-10-04T03:50:33.871293+00:00 kocer-main-webserver sshd[3557623]: Invalid user deployer from 43.138.60.111 port 60886
2026-10-04T03:50:37.434223+00:00 kocer-main-webserver sshd[3557629]: Invalid user hduser from 43.138.60.111 port 60916
...
show less
Brute-Force
SSH
🇯🇵
34.153.213.64
04 Oct 2026
2026/10/04 02:54:20 [error] 3550121#3550121: *5594399 access forbidden by rule, client: 34.153.213.6 ...
show more
2026/10/04 02:54:20 [error] 3550121#3550121: *5594399 access forbidden by rule, client: 34.153.213.64, server: kocervpn.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/dist/.vite/manifest.json"
2026/10/04 02:54:20 [error] 3550121#3550121: *5594210 access forbidden by rule, client: 34.153.213.64, server: kocervpn.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.vite/manifest.json"
2026/10/04 02:54:28 [error] 3550121#3550121: *5594501 access forbidden by rule, client: 34.153.213.64, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.env"
2026/10/04 02:54:29 [error] 3550121#3550121: *5594501 access forbidden by rule, client: 34.153.213.64, server: kocervpn.com, request: "GET /.env.production HTTP/1.1", host: "kocervpn.com", referrer: "https://www.kocervpn.com/.env.production"
2026/10/04 02:54:29 [error]
...
show less
Web App Attack
🇸🇬
165.245.185.254
04 Oct 2026
2026-10-04T02:49:47.137036+00:00 kocer-main-webserver sshd[3551568]: Invalid user moein from 165.245 ...
show more
2026-10-04T02:49:47.137036+00:00 kocer-main-webserver sshd[3551568]: Invalid user moein from 165.245.185.254 port 48606
2026-10-04T02:52:47.235977+00:00 kocer-main-webserver sshd[3551838]: Invalid user ansibleadmin from 165.245.185.254 port 53986
2026-10-04T02:54:12.038529+00:00 kocer-main-webserver sshd[3551995]: Invalid user bitnami from 165.245.185.254 port 33940
...
show less
Brute-Force
SSH
🇸🇬
165.245.185.254
04 Oct 2026
2026-10-04T02:28:35.912642+00:00 kocer-main-webserver sshd[3549452]: Invalid user steam from 165.245 ...
show more
2026-10-04T02:28:35.912642+00:00 kocer-main-webserver sshd[3549452]: Invalid user steam from 165.245.185.254 port 60998
2026-10-04T02:36:43.640835+00:00 kocer-main-webserver sshd[3550220]: Invalid user ubuntu from 165.245.185.254 port 58932
2026-10-04T02:38:15.907324+00:00 kocer-main-webserver sshd[3550386]: Invalid user admin from 165.245.185.254 port 39188
...
show less
Brute-Force
SSH
🇰🇷
20.194.5.96
04 Oct 2026
2026/10/04 02:08:05 [error] 3545303#3545303: *5590438 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 02:08:05 [error] 3545303#3545303: *5590438 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.5.96, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
20.194.5.96 - - [04/Oct/2026:02:08:05 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 02:08:05 [error] 3545303#3545303: *5590234 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.194.5.96, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
20.194.5.96 - - [04/Oct/2026:02:08:05 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 02:08:05 [error] 3545303#3545303: *559023
...
show less
Web App Attack
🇭🇰
20.205.122.89
04 Oct 2026
2026/10/04 01:54:16 [error] 3541837#3541837: *5588619 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 01:54:16 [error] 3541837#3541837: *5588619 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.205.122.89, server: kocerroxy.com, request: "GET /admin.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.205.122.89 - - [04/Oct/2026:01:54:16 +0000] "GET /admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/10/04 01:54:16 [error] 3541837#3541837: *5588619 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.205.122.89, server: kocerroxy.com, request: "GET /goods.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.205.122.89 - - [04/Oct/2026:01:54:16 +0000] "GET /goods.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K
...
show less
Web App Attack
🇨🇳
180.108.149.71
04 Oct 2026
2026-10-04T01:32:41.617609+00:00 kocer-main-webserver sshd[3543124]: Invalid user pi from 180.108.14 ...
show more
2026-10-04T01:32:41.617609+00:00 kocer-main-webserver sshd[3543124]: Invalid user pi from 180.108.149.71 port 11748
2026-10-04T01:32:48.264707+00:00 kocer-main-webserver sshd[3543140]: Invalid user user from 180.108.149.71 port 11795
2026-10-04T01:32:49.297823+00:00 kocer-main-webserver sshd[3543140]: error: maximum authentication attempts exceeded for invalid user user from 180.108.149.71 port 11795 ssh2 [preauth]
...
show less
Brute-Force
SSH
🇦🇺
20.92.83.244
04 Oct 2026
2026/10/04 01:19:00 [error] 3541072#3541072: *5585877 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 01:19:00 [error] 3541072#3541072: *5585877 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.92.83.244, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.92.83.244 - - [04/Oct/2026:01:19:00 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 01:19:01 [error] 3541072#3541072: *5585877 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.92.83.244, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "adminpanel.kocerroxy.com"
20.92.83.244 - - [04/Oct/2026:01:19:01 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 01:19:01 [error] 354107
...
show less
Web App Attack
🇧🇷
177.104.161.142
04 Oct 2026
2026/10/04 01:10:46 [error] 3539370#3539370: *5585797 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 01:10:46 [error] 3539370#3539370: *5585797 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 177.104.161.142, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
177.104.161.142 - - [04/Oct/2026:01:10:46 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2026/10/04 01:10:49 [error] 3539370#3539370: *5585797 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 177.104.161.142, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
177.104.1
...
show less
Web App Attack
🇦🇺
20.211.90.37
04 Oct 2026
2026/10/04 00:54:14 [error] 3533174#3533174: *5583782 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/04 00:54:14 [error] 3533174#3533174: *5583782 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.211.90.37, server: kocerroxy.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
2026/10/04 00:54:14 [error] 3533174#3533174: *5583782 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.211.90.37, server: kocerroxy.com, request: "GET /this_is_a_new_hello_world.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
20.211.90.37 - - [04/Oct/2026:00:54:14 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 47 "-" "-"
20.211.90.37 - - [04/Oct/2026:00:54:14 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 47 "-" "-"
2026/10/04 00:54:14 [error] 3533174#3533174: *55
...
show less
Web App Attack
🇯🇵
20.210.186.186
03 Oct 2026
2026/10/03 23:53:01 [error] 3532571#3532571: *5578844 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/03 23:53:01 [error] 3532571#3532571: *5578844 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.210.186.186, server: kocerroxy.com, request: "GET /2.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.210.186.186 - - [03/Oct/2026:23:53:01 +0000] "GET /2.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
2026/10/03 23:53:01 [error] 3532571#3532571: *5578844 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 20.210.186.186, server: kocerroxy.com, request: "GET /a.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "kocerroxy.com"
20.210.186.186 - - [03/Oct/2026:23:53:01 +0000] "GET /a.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G
...
show less
Web App Attack
🇧🇷
181.189.81.244
03 Oct 2026
2026-10-03T23:35:47.684674+00:00 kocer-main-webserver sshd[3531380]: Invalid user bot from 181.189.8 ...
show more
2026-10-03T23:35:47.684674+00:00 kocer-main-webserver sshd[3531380]: Invalid user bot from 181.189.81.244 port 37640
2026-10-03T23:37:46.808833+00:00 kocer-main-webserver sshd[3531555]: Invalid user vmail from 181.189.81.244 port 59674
2026-10-03T23:39:46.611688+00:00 kocer-main-webserver sshd[3531875]: Invalid user user from 181.189.81.244 port 48272
...
show less
Brute-Force
SSH
🇧🇷
181.189.81.244
03 Oct 2026
2026-10-03T23:14:50.847915+00:00 kocer-main-webserver sshd[3529437]: Invalid user wd from 181.189.81 ...
show more
2026-10-03T23:14:50.847915+00:00 kocer-main-webserver sshd[3529437]: Invalid user wd from 181.189.81.244 port 59232
2026-10-03T23:18:35.854448+00:00 kocer-main-webserver sshd[3529779]: Invalid user ubuntu from 181.189.81.244 port 35684
2026-10-03T23:24:21.020204+00:00 kocer-main-webserver sshd[3530350]: Invalid user dict from 181.189.81.244 port 55528
...
show less
Brute-Force
SSH
🇺🇸
208.82.118.98
03 Oct 2026
2026/10/03 23:11:31 [error] 3526698#3526698: *5576150 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/03 23:11:31 [error] 3526698#3526698: *5576150 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 208.82.118.98, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
208.82.118.98 - - [03/Oct/2026:23:11:31 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
2026/10/03 23:11:32 [error] 3526698#3526698: *5576150 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 208.82.118.98, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
208.8
...
show less
Web App Attack
🇸🇬
45.119.200.219
03 Oct 2026
2026-10-03T23:03:45.758950+00:00 kocer-main-webserver sshd[3528230]: Invalid user marcelo from 45.11 ...
show more
2026-10-03T23:03:45.758950+00:00 kocer-main-webserver sshd[3528230]: Invalid user marcelo from 45.119.200.219 port 40822
2026-10-03T23:07:00.882984+00:00 kocer-main-webserver sshd[3528516]: Invalid user gitlab from 45.119.200.219 port 48246
2026-10-03T23:09:56.713559+00:00 kocer-main-webserver sshd[3528948]: Invalid user ftpadmin from 45.119.200.219 port 50998
...
show less
Brute-Force
SSH
🇸🇬
45.119.200.219
03 Oct 2026
2026-10-03T22:48:36.125558+00:00 kocer-main-webserver sshd[3526790]: Invalid user jarservice from 45 ...
show more
2026-10-03T22:48:36.125558+00:00 kocer-main-webserver sshd[3526790]: Invalid user jarservice from 45.119.200.219 port 56508
2026-10-03T22:51:35.308988+00:00 kocer-main-webserver sshd[3527057]: Invalid user connor from 45.119.200.219 port 29892
2026-10-03T22:53:16.839253+00:00 kocer-main-webserver sshd[3527242]: Invalid user t1 from 45.119.200.219 port 43926
...
show less
Brute-Force
SSH
🇮🇳
190.92.174.183
03 Oct 2026
2026/10/03 22:47:52 [error] 3526377#3526377: *5574745 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/03 22:47:52 [error] 3526377#3526377: *5574745 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 190.92.174.183, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
190.92.174.183 - - [03/Oct/2026:22:47:52 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
2026/10/03 22:47:53 [error] 3526377#3526377: *5574764 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 190.92.174.183, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.p
...
show less
Web App Attack
🇮🇩
222.124.191.185
03 Oct 2026
2026/10/03 22:40:12 [error] 3524197#3524197: *5573653 FastCGI sent in stderr: "Primary script unknow ...
show more
2026/10/03 22:40:12 [error] 3524197#3524197: *5573653 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 222.124.191.185, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrpc.php"
222.124.191.185 - - [03/Oct/2026:22:40:12 +0000] "GET /xmlrpc.php HTTP/1.1" 404 47 "http://app.kocerroxy.com/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
2026/10/03 22:40:14 [error] 3524197#3524197: *5573653 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 222.124.191.185, server: kocerroxy.com, request: "GET /xmlrpc.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com", referrer: "http://app.kocerroxy.com/xmlrp
...
show less
Web App Attack