๐ฉ๐ช
18.198.56.49
02 Dec 2025
18.198.56.49 - - [02/Dec/2025:16:10:38 +0000] "GET / HTTP/1.1" 200 1011 "-" "Mozilla/5.0 (Windows NT ...
show more
18.198.56.49 - - [02/Dec/2025:16:10:38 +0000] "GET / HTTP/1.1" 200 1011 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/91.0.4472.124"
18.198.56.49 - - [02/Dec/2025:16:10:38 +0000] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
18.198.56.49 - - [02/Dec/2025:16:10:38 +0000] "GET /info.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
sanning for exploits
show less
Hacking
Brute-Force
Web App Attack
๐ฎ๐ธ
93.95.229.36
02 Dec 2025
93.95.229.36 - - [02/Dec/2025:10:56:37 +0000] "GET /phpmyadm/ HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (L ...
show more
93.95.229.36 - - [02/Dec/2025:10:56:37 +0000] "GET /phpmyadm/ HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
93.95.229.36 - - [02/Dec/2025:10:56:47 +0000] "GET /phpmyadmin-2/ HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
93.95.229.36 - - [02/Dec/2025:10:56:56 +0000] "GET /phpMyAdmin-4.6.2-all-languages HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
unbelievable number of hits, absolute time and resource waste.
show less
Hacking
Brute-Force
Web App Attack
๐ธ๐ช
162.158.183.64
01 Dec 2025
162.158.183.64 - - [01/Dec/2025:22:12:55 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1372 " ...
show more
162.158.183.64 - - [01/Dec/2025:22:12:55 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
likely the same abuser over a dozen IPs, thanks to Cloudflare
show less
Web App Attack
๐ธ๐ช
162.158.183.63
01 Dec 2025
162.158.183.63 - - [01/Dec/2025:22:09:47 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 254 "- ...
show more
162.158.183.63 - - [01/Dec/2025:22:09:47 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Cloudflare are enabling these abusers to use multiple ips, they definitely could detect these attacks, but don't
show less
Web App Attack
๐ธ๐ช
104.23.221.223
01 Dec 2025
104.23.221.223 - - [01/Dec/2025:22:09:47 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
104.23.221.223 - - [01/Dec/2025:22:09:47 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Cloudflare should stop these attacks
show less
Web App Attack
๐ธ๐ช
104.23.223.116
01 Dec 2025
104.23.223.116 - - [01/Dec/2025:22:09:09 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
104.23.223.116 - - [01/Dec/2025:22:09:09 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Cloudflare should do more to stop these attacks.
show less
Web App Attack
๐จ๐ฆ
134.122.32.6
01 Dec 2025
134.122.32.6 - - [01/Dec/2025:21:17:27 +0000] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
134.122.32.6 - - [01/Dec/2025:21:17:27 +0000] "GET //news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
Searching for exploits
show less
Web App Attack
๐บ๐ธ
136.112.55.211
01 Dec 2025
136.112.55.211 - - [01/Dec/2025:20:34:19 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://xxxxxxxxxxxxxx.co ...
show more
136.112.55.211 - - [01/Dec/2025:20:34:19 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://xxxxxxxxxxxxxx.com/wp/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
Searching for exploits
show less
Web App Attack
๐บ๐ธ
35.235.87.160
01 Dec 2025
35.235.87.160 - - [01/Dec/2025:17:49:46 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://gilliansinclair.co ...
show more
35.235.87.160 - - [01/Dec/2025:17:49:46 +0000] "HEAD /wp/ HTTP/1.1" 404 - "http://gilliansinclair.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.2365.66"
35.235.87.160 - - [01/Dec/2025:17:49:46 +0000] "HEAD /new/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
๐ธ๐ฌ
152.42.222.75
01 Dec 2025
152.42.222.75 - - [01/Dec/2025:13:22:34 +0000] "GET /wp-json/wp/v2/pages HTTP/1.1" 404 1035 "-" "Moz ...
show more
152.42.222.75 - - [01/Dec/2025:13:22:34 +0000] "GET /wp-json/wp/v2/pages HTTP/1.1" 404 1035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36"
loads of exploit requests
show less
Hacking
Brute-Force
Web App Attack
๐ธ๐ช
51.20.125.45
01 Dec 2025
51.20.125.45 - - [01/Dec/2025:11:17:38 +0000] "GET /i.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1" ...
show more
51.20.125.45 - - [01/Dec/2025:11:17:38 +0000] "GET /i.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
51.20.125.45 - - [01/Dec/2025:11:17:38 +0000] "GET /phpversion.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
brute force 100s of requests looking for exploits
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
3.90.40.228
01 Dec 2025
3.90.40.228 - - [01/Dec/2025:01:59:22 +0000] "GET /.env.secrets HTTP/1.1" 404 1035 "-" "Mozilla/5.0 ...
show more
3.90.40.228 - - [01/Dec/2025:01:59:22 +0000] "GET /.env.secrets HTTP/1.1" 404 1035 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"
3.90.40.228 - - [01/Dec/2025:01:59:23 +0000] "GET /.env.private HTTP/1.1" 404 1035 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0"
show less
Hacking
Brute-Force
๐ฎ๐ณ
15.206.123.107
01 Dec 2025
15.206.123.107 - - [01/Dec/2025:03:25:03 +0000] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx ...
show more
15.206.123.107 - - [01/Dec/2025:03:25:03 +0000] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
100s of 404 requests, looking for exploits.
show less
Hacking
Brute-Force
Web App Attack
๐ฌ๐ง
141.101.98.248
01 Dec 2025
141.101.98.248 - - [01/Dec/2025:00:52:12 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 258 "- ...
show more
141.101.98.248 - - [01/Dec/2025:00:52:12 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฌ๐ง
35.178.118.112
01 Dec 2025
35.178.118.112 - - [01/Dec/2025:01:37:14 +0000] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx ...
show more
35.178.118.112 - - [01/Dec/2025:01:37:14 +0000] "GET /phpinfo.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
35.178.118.112 - - [01/Dec/2025:01:37:15 +0000] "GET /info.php HTTP/1.1" 404 16 "-" "python-httpx/0.28.1"
plus 1000s more
show less
Brute-Force
Web App Attack
๐ฌ๐ง
13.40.30.209
30 Nov 2025
13.40.30.209 - - [29/Nov/2025:23:41:05 +0000] "GET /mailgun HTTP/1.1" 404 1035 "-" "python-httpx/0.2 ...
show more
13.40.30.209 - - [29/Nov/2025:23:41:05 +0000] "GET /mailgun HTTP/1.1" 404 1035 "-" "python-httpx/0.28.1"
and 100s more...
show less
Web App Attack
๐บ๐ธ
162.158.155.121
30 Nov 2025
162.158.155.121 - - [30/Nov/2025:12:59:43 +0000] "GET / HTTP/1.1" 200 30 "-" "Mozilla/5.0 (l9scan/2. ...
show more
162.158.155.121 - - [30/Nov/2025:12:59:43 +0000] "GET / HTTP/1.1" 200 30 "-" "Mozilla/5.0 (l9scan/2.0.634323e2637313e27363e2237313; +https://leakix.net)"
show less
Bad Web Bot
๐บ๐ธ
35.243.222.249
30 Nov 2025
35.243.222.249 - - [30/Nov/2025:20:13:47 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPad; C ...
show more
35.243.222.249 - - [30/Nov/2025:20:13:47 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1"
show less
Web App Attack
๐บ๐ธ
34.106.48.194
30 Nov 2025
34.106.48.194 - - [30/Nov/2025:17:57:54 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; A ...
show more
34.106.48.194 - - [30/Nov/2025:17:57:54 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36"
show less
Web App Attack
๐บ๐ธ
34.102.63.190
30 Nov 2025
34.102.63.190 - - [30/Nov/2025:17:04:32 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows ...
show more
34.102.63.190 - - [30/Nov/2025:17:04:32 +0000] "HEAD /wp/ HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.200 YaBrowser/24.1.0.0 Safari/537.36"
show less
Web App Attack
๐ฌ๐ง
172.70.86.94
30 Nov 2025
172.70.86.94 - - [30/Nov/2025:15:18:17 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 40 ...
show more
172.70.86.94 - - [30/Nov/2025:15:18:17 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 404 1372 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฐ๐ท
4.217.216.231
30 Nov 2025
4.217.216.231 - - [30/Nov/2025:13:25:18 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 301 251 " ...
show more
4.217.216.231 - - [30/Nov/2025:13:25:18 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 301 251 "-" "-"
show less
Web App Attack
๐ฏ๐ต
4.189.168.36
30 Nov 2025
4.189.168.36 - - [30/Nov/2025:12:04:37 +0000] "GET /wp-admin/network/ HTTP/1.1" 404 1035 "-" "-"
4. ...
show more
4.189.168.36 - - [30/Nov/2025:12:04:37 +0000] "GET /wp-admin/network/ HTTP/1.1" 404 1035 "-" "-"
4.189.168.36 - - [30/Nov/2025:12:04:37 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 301 260 "-" "-"
4.189.168.36 - - [30/Nov/2025:12:04:37 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 1035 "-" "-"
4.189.168.36 - - [30/Nov/2025:12:04:38 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 301 259 "-" "-"
show less
Web App Attack
๐ฌ๐ง
172.68.229.117
30 Nov 2025
172.68.229.117 - - [30/Nov/2025:09:50:11 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" ...
show more
172.68.229.117 - - [30/Nov/2025:09:50:11 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 301 268 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
show less
Web App Attack
๐ธ๐ช
104.23.217.121
30 Nov 2025
104.23.217.121 - - [30/Nov/2025:06:01:34 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 258 "- ...
show more
104.23.217.121 - - [30/Nov/2025:06:01:34 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 301 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
show less
Web App Attack