๐ฎ๐ณ
4.213.160.187
31 Dec 2025
4.213.160.187 - - [30/Dec/2025:19:40:09 +0000] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 404 1 ...
show more
4.213.160.187 - - [30/Dec/2025:19:40:09 +0000] "GET /wp-includes/js/crop/cropper.php HTTP/1.1" 404 1035 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1"
and fake referrer
show less
Web App Attack
๐ณ๐ฑ
64.225.74.156
31 Dec 2025
64.225.74.156 - - [30/Dec/2025:17:44:58 +0000] "GET / HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Macintosh; ...
show more
64.225.74.156 - - [30/Dec/2025:17:44:58 +0000] "GET / HTTP/1.1" 301 276 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 iubenda-radar/2.82.0"
show less
Bad Web Bot
๐ช๐ธ
158.158.107.153
31 Dec 2025
158.158.107.153 - - [30/Dec/2025:17:12:24 +0000] "GET /bolt.php HTTP/1.1" 404 16 "-" "-"
Hacking
Web App Attack
๐บ๐ธ
18.144.44.64
31 Dec 2025
18.144.44.64 - - [30/Dec/2025:08:32:33 +0000] "HEAD /_next/data HTTP/1.1" 404 - "-" "Mozilla/5.0 (Wi ...
show more
18.144.44.64 - - [30/Dec/2025:08:32:33 +0000] "HEAD /_next/data HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
& many more searches for exploits.
show less
Hacking
Web App Attack
๐บ๐ธ
102.129.234.70
31 Dec 2025
102.129.234.70 - - [31/Dec/2025:00:44:31 +0000] "GET /.env HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Macin ...
show more
102.129.234.70 - - [31/Dec/2025:00:44:31 +0000] "GET /.env HTTP/1.1" 301 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Hacking
Web App Attack
๐ฉ๐ช
64.226.70.57
30 Dec 2025
64.226.70.57 - - [30/Dec/2025:00:18:05 +0000] "POST / HTTP/1.1" 200 27 "-" "Mozilla/5.0 (Windows NT ...
show more
64.226.70.57 - - [30/Dec/2025:00:18:05 +0000] "POST / HTTP/1.1" 200 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
It's a toss up between Digital Ocean and Microsoft today :[
show less
Hacking
Web App Attack
๐ฎ๐ณ
4.213.153.145
30 Dec 2025
4.213.153.145 - - [29/Dec/2025:20:25:34 +0000] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 297 "htt ...
show more
4.213.153.145 - - [29/Dec/2025:20:25:34 +0000] "GET /wp-admin/css/colors/blue HTTP/1.1" 301 297 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36"
Fraudulent user agent referrer etc......
show less
Hacking
Web App Attack
๐ฐ๐ท
4.217.250.2
30 Dec 2025
4.217.250.2 - - [29/Dec/2025:18:53:19 +0000] "GET /wp-good.php HTTP/1.1" 301 287 "https://www.yahoo. ...
show more
4.217.250.2 - - [29/Dec/2025:18:53:19 +0000] "GET /wp-good.php HTTP/1.1" 301 287 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1"
just about fraudulent everything
show less
Hacking
Web App Attack
๐ฏ๐ต
4.190.202.25
30 Dec 2025
4.190.202.25 - - [29/Dec/2025:18:02:51 +0000] "GET /wp-content/403.php HTTP/1.1" 404 - "https://www. ...
show more
4.190.202.25 - - [29/Dec/2025:18:02:51 +0000] "GET /wp-content/403.php HTTP/1.1" 404 - "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36"
Fraudulent user agent
show less
Hacking
Web App Attack
๐ธ๐ช
104.23.221.117
30 Dec 2025
104.23.221.117 - - [29/Dec/2025:12:32:22 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
104.23.221.117 - - [29/Dec/2025:12:32:22 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 1035 "-" "http://xxxxxxx.xxx/wordpress/wp-admin/setup-config.php"
cloudflare proxies are a problem!
show less
Hacking
Web App Attack
๐ธ๐ช
162.158.183.63
30 Dec 2025
162.158.183.63 - - [29/Dec/2025:11:11:19 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
162.158.183.63 - - [29/Dec/2025:11:11:19 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 304 "-" "http://xxxxxx.xxx/wordpress/wp-admin/setup-config.php"
Even if it is cloudflare - something should be done
show less
Hacking
Web App Attack
๐ฉ๐ช
4.185.64.47
30 Dec 2025
4.185.64.47 - - [29/Dec/2025:11:08:23 +0000] "GET /zwso.php HTTP/1.1" 404 16 "-" "-"
and 100s more. ...
show more
4.185.64.47 - - [29/Dec/2025:11:08:23 +0000] "GET /zwso.php HTTP/1.1" 404 16 "-" "-"
and 100s more...
show less
Hacking
Web App Attack
๐ท๐บ
172.68.10.119
30 Dec 2025
172.68.10.119 - - [29/Dec/2025:02:34:49 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 3 ...
show more
172.68.10.119 - - [29/Dec/2025:02:34:49 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 308 "-" "http://fake-referrer/wordpress/wp-admin/setup-config.php"
show less
Web App Attack
๐ธ๐ฌ
152.42.251.174
30 Dec 2025
152.42.251.174 - - [29/Dec/2025:10:34:01 +0000] "GET /.sftp-config.json HTTP/1.1" 404 - "-" "Mozilla ...
show more
152.42.251.174 - - [29/Dec/2025:10:34:01 +0000] "GET /.sftp-config.json HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
Digital Oceon :[
show less
Hacking
Web App Attack
๐ฐ๐ท
4.230.45.150
27 Dec 2025
4.230.45.150 - - [27/Dec/2025:20:23:06 +0000] "GET /buy.php HTTP/1.1" 301 283 "https://www.bing.com/ ...
show more
4.230.45.150 - - [27/Dec/2025:20:23:06 +0000] "GET /buy.php HTTP/1.1" 301 283 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1"
Fake Agent / Referrer
show less
Hacking
Web App Attack
๐ฆ๐บ
68.218.100.201
27 Dec 2025
68.218.100.201 - - [27/Dec/2025:19:36:00 +0000] "GET /index/function.php HTTP/1.1" 301 287 "https:// ...
show more
68.218.100.201 - - [27/Dec/2025:19:36:00 +0000] "GET /index/function.php HTTP/1.1" 301 287 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1"
fake agent / referrer
show less
Hacking
Web App Attack
๐ธ๐ช
104.23.223.117
27 Dec 2025
104.23.223.117 - - [27/Dec/2025:16:52:23 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
104.23.223.117 - - [27/Dec/2025:16:52:23 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 1372 "-" "https://dfake.referrer/wordpress/wp-admin/setup-config.php"
Don't care if it is cloudflare - still abuse
show less
Web App Attack
๐ฉ๐ช
18.196.247.211
27 Dec 2025
18.196.247.211 - - [27/Dec/2025:12:55:32 +0000] "POST / HTTP/1.1" 200 1084 "-" "Mozilla/5.0 (Windows ...
show more
18.196.247.211 - - [27/Dec/2025:12:55:32 +0000] "POST / HTTP/1.1" 200 1084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
up to no good!
show less
Hacking
๐ธ๐ช
172.68.183.51
27 Dec 2025
172.68.183.51 - - [27/Dec/2025:08:50:42 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1035 "- ...
show more
172.68.183.51 - - [27/Dec/2025:08:50:42 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1035 "-" "https://fake.referrer/wp-admin/setup-config.php"
show less
Web App Attack
๐บ๐ธ
35.230.24.165
27 Dec 2025
35.230.24.165 - - [27/Dec/2025:05:18:50 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1 ...
show more
35.230.24.165 - - [27/Dec/2025:05:18:50 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Web App Attack
๐ท๐บ
172.71.184.91
27 Dec 2025
172.71.184.91 - - [27/Dec/2025:03:24:59 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 298 "-" ...
show more
172.71.184.91 - - [27/Dec/2025:03:24:59 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36"
perhaps it's just me
show less
Web App Attack
๐บ๐ธ
209.38.143.33
27 Dec 2025
209.38.143.33 - - [27/Dec/2025:03:04:10 +0000] "GET /wp-login.php HTTP/1.1" 301 288 "-" "Mozilla/5.0 ...
show more
209.38.143.33 - - [27/Dec/2025:03:04:10 +0000] "GET /wp-login.php HTTP/1.1" 301 288 "-" "Mozilla/5.0"
209.38.143.33 - - [27/Dec/2025:03:04:10 +0000] "GET /wp-login.php HTTP/1.1" 301 276 "-" "Mozilla/5.0"
209.38.143.33 - - [27/Dec/2025:03:04:10 +0000] "GET /wp-login.php HTTP/1.1" 301 285 "-" "Mozilla/5.0"
209.38.143.33 - - [27/Dec/2025:03:04:11 +0000] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0"
209.38.143.33 - - [27/Dec/2025:03:04:11 +0000] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0"
209.38.143.33 - - [27/Dec/2025:03:04:11 +0000] "GET /wp-login.php HTTP/1.1" 404 16 "-" "Mozilla/5.0"
because once just is not enough
show less
Web App Attack
๐บ๐ธ
34.106.43.85
26 Dec 2025
34.106.43.85 - - [26/Dec/2025:22:51:47 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://xxxxxxxxxxx.com/wp/ ...
show more
34.106.43.85 - - [26/Dec/2025:22:51:47 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://xxxxxxxxxxx.com/wp/" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
show less
Web App Attack
๐บ๐ธ
34.106.125.114
26 Dec 2025
34.106.125.114 - - [26/Dec/2025:22:44:44 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fe ...
show more
34.106.125.114 - - [26/Dec/2025:22:44:44 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
show less
Web App Attack
๐ธ๐ช
104.23.221.66
26 Dec 2025
104.23.221.66 - - [26/Dec/2025:18:54:05 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1035 "- ...
show more
104.23.221.66 - - [26/Dec/2025:18:54:05 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1035 "-" "http://fake.referrer/wp-admin/setup-config.php"
more cloudflare proxy abuse
show less
Web App Attack