User nfsec.pl, the webmaster of nfsec.pl, joined AbuseIPDB in April 2019 and has reported 36,832 IP addresses.

Standing (weight) is good.

IP	Date	Comment	Categories
170.187.173.140	3 hours ago	170.187.173.140 - - [24/Sep/2023:09:59:04 +0200] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1. ... show more170.187.173.140 - - [24/Sep/2023:09:59:04 +0200] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 22532 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.187.173.140 - - [24/Sep/2023:09:59:18 +0200] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 2502 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.187.173.140 - - [24/Sep/2023:09:59:48 +0200] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 22506 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 170.187.173.140 - - [24/Sep/2023:09:59:53 +0200] "GET /wp-includes/js/tinymce/s ... show less	Web App Attack
2600:3c03::f03c:93ff:feb0:94df	4 hours ago	2600:3c03::f03c:93ff:feb0:94df - - [24/Sep/2023:08:25:29 +0200] "GET /wp-content/plugins/pw-bulk-edi ... show more2600:3c03::f03c:93ff:feb0:94df - - [24/Sep/2023:08:25:29 +0200] "GET /wp-content/plugins/pw-bulk-edit/readme.txt HTTP/1.1" 404 28583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 2600:3c03::f03c:93ff:feb0:94df - - [24/Sep/2023:08:25:31 +0200] "GET /wp-content/plugins/admin-and-client-message-after-order-for-woocommerce/js/convo.js HTTP/1.1" 404 28496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 2600:3c03::f03c:93ff:feb0:94df - - [24/Sep/2023:08:25:32 +0200] "GET /wp-content/plugins/mabel-shoppable-images-lite/public/js/public.min.js HTTP/1.1" 404 28447 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 2600:3c03::f03c:93ff:feb0:94df - - [24/Sep/2023:08:25:34 +0200] "GET /wp-content/plugins/woo-mini-cart-drawer/js/customizer.js HTTP/1.1" 404 28595 "-" "Mozilla/5.0 (Windows NT 1 ... show less	Web App Attack
85.215.101.6	5 hours ago	85.215.101.6 - - [24/Sep/2023:08:04:04 +0200] "GET /.env HTTP/1.1" 404 27900 "-" "Mozilla/5.0 (Windo ... show more85.215.101.6 - - [24/Sep/2023:08:04:04 +0200] "GET /.env HTTP/1.1" 404 27900 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 85.215.101.6 - - [24/Sep/2023:08:04:07 +0200] "GET /conf/.env HTTP/1.1" 404 27831 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 85.215.101.6 - - [24/Sep/2023:08:04:09 +0200] "GET /wp-content/.env HTTP/1.1" 404 28050 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 85.215.101.6 - - [24/Sep/2023:08:04:11 +0200] "GET /wp-admin/.env HTTP/1.1" 404 27885 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36" 85.215.101.6 - - [24/Sep/2023:08:04:13 +0200] "GET /library/.env HTTP/1.1" 404 28049 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/ ... show less	Web App Attack
4.151.108.38	5 hours ago	4.151.108.38 - - [24/Sep/2023:07:54:52 +0200] "GET /Tiny%20File%20Manager HTTP/2.0" 404 21907 "http: ... show more4.151.108.38 - - [24/Sep/2023:07:54:52 +0200] "GET /Tiny%20File%20Manager HTTP/2.0" 404 21907 "http://nfsec.pl/Tiny%20File%20Manager" "Go-http-client/2.0" 4.151.108.38 - - [24/Sep/2023:07:54:54 +0200] "GET /wp-includes/IXR/makeasmtp.php HTTP/2.0" 404 21799 "https://nfsec.pl/wp-includes/IXR/makeasmtp.php?p=" "Go-http-client/2.0" 4.151.108.38 - - [24/Sep/2023:07:54:55 +0200] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/2.0" 404 21959 "http://nfsec.pl//wp-content/plugins/hellopress/wp_mna.php" "Go-http-client/2.0" 4.151.108.38 - - [24/Sep/2023:07:55:01 +0200] "GET /wp-includes/Requests/Text/ HTTP/2.0" 404 21969 "https://nfsec.pl/wp-includes/Requests/Text/index.php" "Go-http-client/2.0" 4.151.108.38 - - [24/Sep/2023:07:55:03 +0200] "GET /wp-content/themes/seotheme/mar.php HTTP/2.0" 404 22000 "http://nfsec.pl//wp-content/themes/seotheme/mar.php" "Go-http-client/2.0" ... show less	Web App Attack
4.151.108.28	5 hours ago	4.151.108.28 - - [24/Sep/2023:07:15:48 +0200] "GET /wp-includes/wp-class.php HTTP/2.0" 404 21966 "ht ... show more4.151.108.28 - - [24/Sep/2023:07:15:48 +0200] "GET /wp-includes/wp-class.php HTTP/2.0" 404 21966 "http://nfsec.pl//wp-includes/wp-class.php" "Go-http-client/2.0" 4.151.108.28 - - [24/Sep/2023:07:15:49 +0200] "GET /wp-info.php HTTP/2.0" 404 21926 "http://nfsec.pl//wp-info.php" "Go-http-client/2.0" 4.151.108.28 - - [24/Sep/2023:07:15:50 +0200] "GET /about.php HTTP/2.0" 404 21933 "http://nfsec.pl//about.php" "Go-http-client/2.0" 4.151.108.28 - - [24/Sep/2023:07:15:50 +0200] "GET /mini.php HTTP/2.0" 404 22028 "http://nfsec.pl//mini.php" "Go-http-client/2.0" 4.151.108.28 - - [24/Sep/2023:07:15:51 +0200] "GET /lock360.php HTTP/2.0" 404 22008 "http://nfsec.pl//lock360.php" "Go-http-client/2.0" ... show less	Web App Attack
141.94.64.149	6 hours ago	141.94.64.149 - - [24/Sep/2023:06:09:12 +0200] "GET /wp-content/plugins/revslider/includes/external/ ... show more141.94.64.149 - - [24/Sep/2023:06:09:12 +0200] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 404 22185 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 141.94.64.149 - - [24/Sep/2023:06:09:13 +0200] "GET /wp-comakase.php HTTP/1.1" 404 27917 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 141.94.64.149 - - [24/Sep/2023:06:09:13 +0200] "GET /wp-content/wp-editor_taksonomy.php HTTP/1.1" 404 27874 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 141.94.64.149 - - [24/Sep/2023:06:09:13 +0200] "GET /wp-content/wp-file-conficg.php HTTP/1.1" 404 27788 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)" 141.94.64 ... show less	Web App Attack
88.152.104.114	18 hours ago	88.152.104.114 - - [23/Sep/2023:19:03:04 +0200] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 37 ... show more88.152.104.114 - - [23/Sep/2023:19:03:04 +0200] "GET /mysql-admin/index.php?lang=en HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 88.152.104.114 - - [23/Sep/2023:19:03:04 +0200] "GET /phpmyadmin2012/index.php?lang=en HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 88.152.104.114 - - [23/Sep/2023:19:03:04 +0200] "GET /phpMyAdmin4/index.php?lang=en HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 88.152.104.114 - - [23/Sep/2023:19:03:04 +0200] "GET /sql/phpmyadmin5/index.php?lang=en HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 88.152.104.11 ... show less	Web App Attack
84.46.242.86	18 hours ago	84.46.242.86 - - [23/Sep/2023:18:46:30 +0200] "GET /xxxxxxx.cfg HTTP/1.1" 404 427 "-" "Mozilla/5.0 ( ... show more84.46.242.86 - - [23/Sep/2023:18:46:30 +0200] "GET /xxxxxxx.cfg HTTP/1.1" 404 427 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 IceDragon/38.0.5 Firefox/38.0.5" 84.46.242.86 - - [23/Sep/2023:18:46:30 +0200] "GET /extensions.conf HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 IceDragon/38.0.5 Firefox/38.0.5" 84.46.242.86 - - [23/Sep/2023:18:46:30 +0200] "GET /sip.cfg HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 IceDragon/38.0.5 Firefox/38.0.5" 84.46.242.86 - - [23/Sep/2023:18:46:31 +0200] "GET /sip.conf HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 IceDragon/38.0.5 Firefox/38.0.5" 84.46.242.86 - - [23/Sep/2023:18:46:33 +0200] "GET /spa122.cfg HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 IceDragon/38.0.5 Firefox/38.0.5" ... show less	Web App Attack
128.90.43.142	22 hours ago	128.90.43.142 - - [23/Sep/2023:14:22:32 +0200] "HEAD /wordpress HTTP/1.1" 404 154 "-" "Mozilla/5.0 ( ... show more128.90.43.142 - - [23/Sep/2023:14:22:32 +0200] "HEAD /wordpress HTTP/1.1" 404 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.142 - - [23/Sep/2023:14:22:32 +0200] "HEAD /wp HTTP/1.1" 404 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.142 - - [23/Sep/2023:14:22:32 +0200] "HEAD /bc HTTP/1.1" 404 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.142 - - [23/Sep/2023:14:22:32 +0200] "HEAD /bk HTTP/1.1" 404 154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.142 - - [23/Sep/2023:14:22:33 +0200] "HEAD /backup HTTP/1.1" 404 154 "-" "Mozilla/5.0 (Windows ... show less	Web App Attack
165.227.110.45	23 hours ago	165.227.110.45 - - [23/Sep/2023:13:55:13 +0200] "GET / HTTP/1.1" 403 5071 "-" "Mozilla/5.0 (X11; Lin ... show more165.227.110.45 - - [23/Sep/2023:13:55:13 +0200] "GET / HTTP/1.1" 403 5071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" 165.227.110.45 - - [23/Sep/2023:13:55:32 +0200] "GET /robots.txt HTTP/1.1" 403 5071 "-" "-" 165.227.110.45 - - [23/Sep/2023:13:55:34 +0200] "GET /sitemap.xml HTTP/1.1" 403 5071 "-" "-" 165.227.110.45 - - [23/Sep/2023:13:55:35 +0200] "GET /.well-known/security.txt HTTP/1.1" 403 5071 "-" "-" 165.227.110.45 - - [23/Sep/2023:13:55:39 +0200] "GET /favicon.ico HTTP/1.1" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36" ... show less	Web App Attack
38.54.50.214	23 Sep 2023	38.54.50.214 - - [23/Sep/2023:13:04:32 +0200] "GET /.env HTTP/1.1" 404 427 "-" "Mozilla/5.0 (Linux; ... show more38.54.50.214 - - [23/Sep/2023:13:04:32 +0200] "GET /.env HTTP/1.1" 404 427 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 38.54.50.214 - - [23/Sep/2023:13:04:33 +0200] "POST / HTTP/1.1" 403 430 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 38.54.50.214 - - [23/Sep/2023:13:04:34 +0200] "GET /.env HTTP/1.1" 403 5474 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 38.54.50.214 - - [23/Sep/2023:13:04:35 +0200] "POST / HTTP/1.1" 403 5474 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT ... show less	Web App Attack
130.255.165.131	23 Sep 2023	130.255.165.131 - - [23/Sep/2023:10:57:10 +0200] "GET /w/load.php?lang=pl&modules=ext.gadget.citatio ... show more130.255.165.131 - - [23/Sep/2023:10:57:10 +0200] "GET /w/load.php?lang=pl&modules=ext.gadget.citation-access-info%2Chlist%2Csmall-references%2Csprawdz-problemy-szablony%2Cwikibugs-styles%2Cwikiflex&only=styles&skin=vector-2022 HTTP/1.1" 404 27673 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 130.255.165.131 - - [23/Sep/2023:10:58:12 +0200] "GET /w/?title=Mandatory_access_control&action=edit HTTP/1.1" 404 22168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 130.255.165.131 - - [23/Sep/2023:10:59:27 +0200] "GET /w/?title=Specjalna:Utw%C3%B3rz_konto&returnto=Mandatory+access+control HTTP/1.1" 404 22242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" 130.255.165.131 - - ... show less	Web App Attack
183.136.225.5	23 Sep 2023	183.136.225.5 - - [23/Sep/2023:10:36:29 +0200] "GET / HTTP/1.1" 403 6017 "-" "Mozilla/5.0 (Macintosh ... show more183.136.225.5 - - [23/Sep/2023:10:36:29 +0200] "GET / HTTP/1.1" 403 6017 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0" 183.136.225.5 - - [23/Sep/2023:10:36:29 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 183.136.225.5 - - [23/Sep/2023:10:36:30 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 183.136.225.5 - - [23/Sep/2023:10:36:30 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 183.136.225.5 - - [23/Sep/2023:10:36:31 +0200] "GET / HTTP/1.0" 400 558 "-" "-" ... show less	Web App Attack
109.237.98.53	23 Sep 2023	109.237.98.53 - - [23/Sep/2023:09:29:55 +0200] "GET /config.php HTTP/1.1" 404 427 "-" "Mozilla/5.0 ( ... show more109.237.98.53 - - [23/Sep/2023:09:29:55 +0200] "GET /config.php HTTP/1.1" 404 427 "-" "Mozilla/5.0 (X11; CrOS x86_64 7077.123.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36" 109.237.98.53 - - [23/Sep/2023:09:29:55 +0200] "GET /admin/config.php HTTP/1.1" 404 427 "-" "Mozilla/5.0 (Linux; Android 6.0; HUAWEI VNS-L31 Build/HUAWEIVNS-L31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.85 Mobile Safari/537.36" 109.237.98.53 - - [23/Sep/2023:09:29:55 +0200] "GET / HTTP/1.1" 403 5459 "-" "Mozilla/5.0 (Linux; Android 4.1.2; C5215 Build/JZO54K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1500.94 Mobile Safari/537.36" 109.237.98.53 - - [23/Sep/2023:09:29:55 +0200] "GET /config.php HTTP/1.1" 403 5459 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/530.19.2 (KHTML, like Gecko) Version/4.0.2 Safari/530.19.1" 109.237.98.53 - - [23/Sep/2023: ... show less	Web App Attack
46.166.185.60	23 Sep 2023	46.166.185.60 - - [23/Sep/2023:06:25:45 +0200] "GET /wp-content/plugins/pw-bulk-edit/readme.txt HTTP ... show more46.166.185.60 - - [23/Sep/2023:06:25:45 +0200] "GET /wp-content/plugins/pw-bulk-edit/readme.txt HTTP/1.1" 404 28622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 46.166.185.60 - - [23/Sep/2023:06:25:48 +0200] "GET /wp-content/plugins/mabel-shoppable-images-lite/public/js/public.min.js HTTP/1.1" 404 28565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 46.166.185.60 - - [23/Sep/2023:06:25:50 +0200] "GET /wp-content/plugins/woo-mini-cart-drawer/js/customizer.js HTTP/1.1" 404 28467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 46.166.185.60 - - [23/Sep/2023:06:25:52 +0200] "GET /wp-content/plugins/custom-add-to-cart-button-for-woocommerce/bundle/js/frontend-bundle.js HTTP/1.1" 404 28575 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0" 46.166. ... show less	Web App Attack
128.90.43.104	22 Sep 2023	128.90.43.104 - - [22/Sep/2023:23:18:56 +0200] "HEAD /wordpress HTTP/1.1" 404 7411 "http://nfsec.pl/ ... show more128.90.43.104 - - [22/Sep/2023:23:18:56 +0200] "HEAD /wordpress HTTP/1.1" 404 7411 "http://nfsec.pl/wordpress" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.104 - - [22/Sep/2023:23:18:57 +0200] "HEAD /wp HTTP/1.1" 404 1292 "http://nfsec.pl/wp" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.104 - - [22/Sep/2023:23:18:58 +0200] "HEAD /bc HTTP/1.1" 404 1292 "http://nfsec.pl/bc" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.104 - - [22/Sep/2023:23:18:58 +0200] "HEAD /bk HTTP/1.1" 404 1292 "http://nfsec.pl/bk" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 128.90.43.104 - - [22/Sep/ ... show less	Web App Attack
195.170.172.128	22 Sep 2023	195.170.172.128 - - [22/Sep/2023:20:11:25 +0200] "POST / HTTP/1.1" 403 393 "-" "Mozilla/5.0 (Windows ... show more195.170.172.128 - - [22/Sep/2023:20:11:25 +0200] "POST / HTTP/1.1" 403 393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" 195.170.172.128 - - [22/Sep/2023:20:11:26 +0200] "POST / HTTP/1.1" 403 393 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" 195.170.172.128 - - [22/Sep/2023:20:11:27 +0200] "GET /WuEL HTTP/1.1" 404 390 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333)" 195.170.172.128 - - [22/Sep/2023:20:11:28 +0200] "GET stager64 HTTP/1.1" 400 422 "-" "-" 195.170.172.128 - - [22/Sep/2023:20:11:29 +0200] "GET /a HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" ... show less	Web App Attack
96.125.168.54	22 Sep 2023	96.125.168.54 - - [22/Sep/2023:08:56:36 +0200] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 ... show more96.125.168.54 - - [22/Sep/2023:08:56:36 +0200] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 7877 "nfsec.pl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/74.0.3729.169 Google/569 Safari/537.36" 96.125.168.54 - - [22/Sep/2023:08:58:16 +0200] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 403 7877 "nfsec.pl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/74.0.3729.169 Google/569 Safari/537.36" 96.125.168.54 - - [22/Sep/2023:09:00:11 +0200] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 7877 "nfsec.pl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/587.38 (KHTML, like Gecko) Chrome/74.0.3729.169 Google/569 Safari/537.36" 96.125.168.54 - - [22/Sep/2023:09:02:44 +0200] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 7877 "nfsec.pl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ... show less	Web App Attack
104.250.237.82	22 Sep 2023	104.250.237.82 - - [22/Sep/2023:06:14:59 +0200] "GET /wp-head.php HTTP/1.1" 404 22257 "-" "Mozilla/5 ... show more104.250.237.82 - - [22/Sep/2023:06:14:59 +0200] "GET /wp-head.php HTTP/1.1" 404 22257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 104.250.237.82 - - [22/Sep/2023:06:15:00 +0200] "GET /radio.php HTTP/1.1" 404 22304 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 104.250.237.82 - - [22/Sep/2023:06:15:00 +0200] "GET /simple.php HTTP/1.1" 404 22334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 104.250.237.82 - - [22/Sep/2023:06:15:01 +0200] "GET /cong.php HTTP/1.1" 404 22344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 104.250.237.82 - - [22/Sep/2023:06:15:03 +0200] "GET /repeater.php HTTP/1. ... show less	Web App Attack
2602:fd37:0:309:6019:aa6f:8c85:12b	22 Sep 2023	2602:fd37:0:309:6019:aa6f:8c85:12b - - [22/Sep/2023:04:25:13 +0200] "GET /wp-head.php HTTP/1.1" 404 ... show more2602:fd37:0:309:6019:aa6f:8c85:12b - - [22/Sep/2023:04:25:13 +0200] "GET /wp-head.php HTTP/1.1" 404 22410 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 2602:fd37:0:309:6019:aa6f:8c85:12b - - [22/Sep/2023:04:25:15 +0200] "GET /radio.php HTTP/1.1" 404 22387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 2602:fd37:0:309:6019:aa6f:8c85:12b - - [22/Sep/2023:04:25:16 +0200] "GET /simple.php HTTP/1.1" 404 22218 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 2602:fd37:0:309:6019:aa6f:8c85:12b - - [22/Sep/2023:04:25:18 +0200] "GET /cong.php HTTP/1.1" 404 22482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/53 ... show less	Web App Attack
3.94.95.10	22 Sep 2023	3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.94.95.10 - - [2 ... show more3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.94.95.10 - - [22/Sep/2023:04:20:46 +0200] "GET / HTTP/1.0" 400 558 "-" "-" ... show less	Web App Attack
2a02:4780:13::2f	21 Sep 2023	2a02:4780:13::2f - - [21/Sep/2023:23:57:55 +0200] "GET /ninja.php HTTP/2.0" 404 21955 "-" "Mozilla/5 ... show more2a02:4780:13::2f - - [21/Sep/2023:23:57:55 +0200] "GET /ninja.php HTTP/2.0" 404 21955 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Mobile/15E148 Safari/604.1" 2a02:4780:13::2f - - [21/Sep/2023:23:57:55 +0200] "GET /shell.php HTTP/2.0" 404 21900 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.111 Mobile Safari/537.36" 2a02:4780:13::2f - - [21/Sep/2023:23:57:55 +0200] "GET /nf_tracking.php HTTP/2.0" 404 21831 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_0_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" 2a02:4780:13::2f - - [21/Sep/2023:23:57:55 +0200] "GET /atomlib.php HTTP/2.0" 404 21801 "-" "Mozilla/5.0 (Linux; Android 9; FLA-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.106 Mobile Safari/537.36 OP ... show less	Web App Attack
3.235.140.151	21 Sep 2023	3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.235.140.151 ... show more3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" 3.235.140.151 - - [21/Sep/2023:23:20:35 +0200] "GET / HTTP/1.0" 400 558 "-" "-" ... show less	Web App Attack
164.92.114.247	21 Sep 2023	164.92.114.247 - - [21/Sep/2023:20:09:29 +0200] "GET / HTTP/1.1" 403 5071 "-" "Mozilla/5.0 (X11; Lin ... show more164.92.114.247 - - [21/Sep/2023:20:09:29 +0200] "GET / HTTP/1.1" 403 5071 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.102 Safari/537.36" 164.92.114.247 - - [21/Sep/2023:20:09:48 +0200] "GET /robots.txt HTTP/1.1" 403 5071 "-" "-" 164.92.114.247 - - [21/Sep/2023:20:09:49 +0200] "GET /sitemap.xml HTTP/1.1" 403 5071 "-" "-" 164.92.114.247 - - [21/Sep/2023:20:09:49 +0200] "GET /.well-known/security.txt HTTP/1.1" 403 5071 "-" "-" 164.92.114.247 - - [21/Sep/2023:20:09:52 +0200] "GET /favicon.ico HTTP/1.1" 403 5459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36" ... show less	Web App Attack
94.156.253.162	21 Sep 2023	94.156.253.162 - - [21/Sep/2023:19:47:15 +0200] "GET /wp-head.php HTTP/1.1" 404 22322 "-" "Mozilla/5 ... show more94.156.253.162 - - [21/Sep/2023:19:47:15 +0200] "GET /wp-head.php HTTP/1.1" 404 22322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 94.156.253.162 - - [21/Sep/2023:19:47:16 +0200] "GET /radio.php HTTP/1.1" 404 22343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 94.156.253.162 - - [21/Sep/2023:19:47:18 +0200] "GET /simple.php HTTP/1.1" 404 22227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 94.156.253.162 - - [21/Sep/2023:19:47:18 +0200] "GET /cong.php HTTP/1.1" 404 22269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" 94.156.253.162 - - [21/Sep/2023:19:47:19 +0200] "GET /repeater.php HTTP/1. ... show less	Web App Attack