Malicious web probe on bearstool.com: 20.213.164.192 - - [13/Oct/2026:00:00:07 -0400] "GET /this_is_ ...
show moreMalicious web probe on bearstool.com: 20.213.164.192 - - [13/Oct/2026:00:00:07 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 444 0 "" "-"
show less
Malicious web probe on bearstool.com: 2804:1dc8:cd04:8f00:1934:f38b:ac4:ac1d - - [12/Oct/2026:23:38: ...
show moreMalicious web probe on bearstool.com: 2804:1dc8:cd04:8f00:1934:f38b:ac4:ac1d - - [12/Oct/2026:23:38:56 -0400] "POST /xmlrpc.php HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 20.214.144.216 - - [12/Oct/2026:23:28:23 -0400] "GET /this_is_ ...
show moreMalicious web probe on bearstool.com: 20.214.144.216 - - [12/Oct/2026:23:28:23 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 444 0 "" "-"
show less
Malicious web probe on bearstool.com: 160.250.132.238 - - [12/Oct/2026:22:52:48 -0400] "POST /cgi-bi ...
show moreMalicious web probe on bearstool.com: 160.250.132.238 - - [12/Oct/2026:22:52:48 -0400] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "" "-"
show less
Malicious web probe on bearstool.com: 74.225.203.7 - - [12/Oct/2026:21:49:46 -0400] "GET /wp-admin/ ...
show moreMalicious web probe on bearstool.com: 74.225.203.7 - - [12/Oct/2026:21:49:46 -0400] "GET /wp-admin/ HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 20.239.176.5 - - [12/Oct/2026:21:47:43 -0400] "GET /this_is_a_ ...
show moreMalicious web probe on bearstool.com: 20.239.176.5 - - [12/Oct/2026:21:47:43 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 444 0 "" "-"
show less
Malicious web probe on bearstool.com: 45.138.12.47 - - [12/Oct/2026:20:55:16 -0400] "POST /wp-admin/ ...
show moreMalicious web probe on bearstool.com: 45.138.12.47 - - [12/Oct/2026:20:55:16 -0400] "POST /wp-admin/admin-ajax.php HTTP/1.1" 444 0 "" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Malicious web probe on bearstool.com: 172.190.114.167 - - [12/Oct/2026:20:44:24 -0400] "GET /autodis ...
show moreMalicious web probe on bearstool.com: 172.190.114.167 - - [12/Oct/2026:20:44:24 -0400] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 444 0 "" "Mozilla/5.0 zgrab/0.x"
show less
Malicious web probe on bearstool.com: 195.178.110.242 - - [12/Oct/2026:19:19:34 -0400] "GET /.aws/cr ...
show moreMalicious web probe on bearstool.com: 195.178.110.242 - - [12/Oct/2026:19:19:34 -0400] "GET /.aws/credentials HTTP/2.0" 404 278 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Malicious web probe on bearstool.com: 34.62.116.145 - - [12/Oct/2026:18:49:00 -0400] "GET /.aws/conf ...
show moreMalicious web probe on bearstool.com: 34.62.116.145 - - [12/Oct/2026:18:49:00 -0400] "GET /.aws/config HTTP/2.0" 404 153 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Malicious web probe on bearstool.com: 13.77.43.211 - - [12/Oct/2026:18:11:30 -0400] "GET /wp-login.p ...
show moreMalicious web probe on bearstool.com: 13.77.43.211 - - [12/Oct/2026:18:11:30 -0400] "GET /wp-login.php HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 13.70.110.189 - - [12/Oct/2026:18:00:13 -0400] "GET /wp-admin/ ...
show moreMalicious web probe on bearstool.com: 13.70.110.189 - - [12/Oct/2026:18:00:13 -0400] "GET /wp-admin/ HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 68.221.17.41 - - [12/Oct/2026:17:20:58 -0400] "GET /wp-login.p ...
show moreMalicious web probe on bearstool.com: 68.221.17.41 - - [12/Oct/2026:17:20:58 -0400] "GET /wp-login.php HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 170.64.140.170 - - [12/Oct/2026:16:36:44 -0400] "GET /.git/con ...
show moreMalicious web probe on bearstool.com: 170.64.140.170 - - [12/Oct/2026:16:36:44 -0400] "GET /.git/config HTTP/2.0" 404 555 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 40.119.40.27 - - [12/Oct/2026:16:33:05 -0400] "GET /owa/auth/x ...
show moreMalicious web probe on bearstool.com: 40.119.40.27 - - [12/Oct/2026:16:33:05 -0400] "GET /owa/auth/x.js HTTP/1.1" 444 0 "" "Mozilla/5.0 zgrab/0.x"
show less
Malicious web probe on bearstool.com: 20.211.97.120 - - [12/Oct/2026:16:09:15 -0400] "GET /alfa-rex. ...
show moreMalicious web probe on bearstool.com: 20.211.97.120 - - [12/Oct/2026:16:09:15 -0400] "GET /alfa-rex.php7 HTTP/2.0" 404 839 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Malicious web probe on bearstool.com: 64.227.43.88 - - [12/Oct/2026:15:57:12 -0400] "GET /.git/confi ...
show moreMalicious web probe on bearstool.com: 64.227.43.88 - - [12/Oct/2026:15:57:12 -0400] "GET /.git/config HTTP/1.1" 444 0 "" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Malicious web probe on bearstool.com: 74.225.146.100 - - [12/Oct/2026:15:07:25 -0400] "GET /cgi-bin/ ...
show moreMalicious web probe on bearstool.com: 74.225.146.100 - - [12/Oct/2026:15:07:25 -0400] "GET /cgi-bin/upgrade/index.php HTTP/2.0" 403 5961 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less