Sensitive file and configuration probing detected against a public web server.
40 suspicious reques ...
show moreSensitive file and configuration probing detected against a public web server.
40 suspicious requests
14 critical requests
Observed requests:
GET /.env
POST /login
POST /api
Risk level: CRITICAL
Reference: STI-20261002-112355-31-59-160-3
show less
WordPress exploitation attempts detected against a public web server.
24 suspicious requests
8 crit ...
show moreWordPress exploitation attempts detected against a public web server.
24 suspicious requests
8 critical requests
Observed requests:
GET /assets/index-BiJ2MzwC.js HTTP/2.0
GET /wp-content/debug.log HTTP/2.0
GET /wp-config.php.bak HTTP/2.0
GET /web.config HTTP/2.0
GET /vendor/composer/installed.json HTTP/2.0
Risk level: CRITICAL
Reference: STI-20261002-085037-45-138-12-25
show less
Inbound malicious web activity detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IP ...
show moreInbound malicious web activity detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET WEB_SERVER Possible SQL Injection SELECT CONCAT in HTTP Request Body
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-10-02T04:31:55.946Z
Last seen: 2026-10-02T04:31:55.946Z
Reference: STI-20261002-063155-178-62-234-41
show less
WordPress exploitation attempts detected against a public web server.
26 suspicious requests
20 cri ...
show moreWordPress exploitation attempts detected against a public web server.
26 suspicious requests
20 critical requests
Observed requests:
GET /wp-content/mysql.sql
GET /wp-config.php.backup
GET /WEB-INF/web.xml
GET /test/
GET /system/.env
Risk level: CRITICAL
Reference: STI-20261002-064919-185-218-86-26
show less
Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/ ...
show moreInbound web exploitation attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-10-02T02:42:26.052Z
Last seen: 2026-10-02T02:42:26.052Z
Reference: STI-20261002-044226-18-192-130-150
show less
WordPress exploitation attempts detected against a public web server.
20 suspicious requests
13 cri ...
show moreWordPress exploitation attempts detected against a public web server.
20 suspicious requests
13 critical requests
Observed requests:
GET /wp-config.php
GET /wp-admin/setup-config.php
GET /_vti_pvt/service.pwd
Risk level: CRITICAL
Reference: STI-20261001-131919-91-148-244-131
show less
WordPress exploitation attempts detected against a public web server.
40 suspicious requests
26 cri ...
show moreWordPress exploitation attempts detected against a public web server.
40 suspicious requests
26 critical requests
Observed requests:
GET /wp-config.php
GET /wp-admin/setup-config.php
GET /_vti_pvt/service.pwd
Risk level: CRITICAL
Reference: STI-20261001-131918-91-148-245-81
show less
Inbound web exploitation attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/ ...
show moreInbound web exploitation attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET EXPLOIT HackingTrio UA (Hello, World)
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-10-01T10:17:29.323Z
Last seen: 2026-10-01T10:17:29.323Z
Reference: STI-20261001-121729-72-255-19-1
show less
Automated web application probing detected against a public web server.
12 suspicious requests
4 cr ...
show moreAutomated web application probing detected against a public web server.
12 suspicious requests
4 critical requests
Observed requests:
GET /z70.php
GET /z60.php?p=
GET /xxw.php
GET /x33.php
GET /wsd.php
Risk level: VERY_HIGH
Reference: STI-20261001-111909-20-58-177-98
show less
Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked ...
show moreInbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-10-01T06:44:45.058Z
Last seen: 2026-10-01T06:44:45.058Z
Reference: STI-20261001-084445-103-46-186-148
show less
WordPress exploitation attempts detected against a public web server.
8 suspicious requests
4 criti ...
show moreWordPress exploitation attempts detected against a public web server.
8 suspicious requests
4 critical requests
Observed requests:
GET /wpuse.php
GET /wp-content/uploads/
GET /wp-content/plugins/hellopress/wp_filemanager.php
GET /wordfence-waf.php
GET /this_is_a_new_hello_world.php
Risk level: VERY_HIGH
Reference: STI-20261001-041903-52-172-226-14
show less
Automated web application probing detected against a public web server.
12 suspicious requests
4 cr ...
show moreAutomated web application probing detected against a public web server.
12 suspicious requests
4 critical requests
Observed requests:
POST /graphql
POST /graphql/api
POST /api
POST /api/graphql
Risk level: VERY_HIGH
Reference: STI-20261001-035205-134-122-28-88
show less
Automated web application probing detected against a public web server.
6 suspicious requests
2 cri ...
show moreAutomated web application probing detected against a public web server.
6 suspicious requests
2 critical requests
Observed requests:
POST /graphql
POST /graphql/api
POST /api
POST /api/graphql
Risk level: VERY_HIGH
Reference: STI-20261001-035206-147-182-149-75
show less
Automated web application probing detected against a public web server.
5 suspicious requests
2 cri ...
show moreAutomated web application probing detected against a public web server.
5 suspicious requests
2 critical requests
Observed requests:
POST /guacamole/api/tokens
POST /graphql
POST /graphql/api
POST /api/tokens
Risk level: VERY_HIGH
Reference: STI-20261001-035206-167-99-182-39
show less
Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked ...
show moreInbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-09-30T08:00:31.961Z
Last seen: 2026-09-30T08:00:31.961Z
Reference: STI-20260930-100031-103-100-211-183
show less
WordPress exploitation attempts detected against a public web server.
5 suspicious requests
2 criti ...
show moreWordPress exploitation attempts detected against a public web server.
5 suspicious requests
2 critical requests
Observed requests:
GET /wp-content/plugins/hellopress/wp_filemanager.php
GET /this_is_a_new_hello_world.php
GET /z60.php?p=
GET /xex.php
GET /wsd.php
Risk level: VERY_HIGH
Reference: STI-20260930-081821-20-204-42-136
show less
WordPress exploitation attempts detected against a public web server.
23 suspicious requests
8 crit ...
show moreWordPress exploitation attempts detected against a public web server.
23 suspicious requests
8 critical requests
Observed requests:
GET /assets/index-BiJ2MzwC.js HTTP/2.0
GET /wp-content/debug.log HTTP/2.0
GET /wp-config.php.bak HTTP/2.0
GET /vendor/composer/installed.json HTTP/2.0
GET /settings.json HTTP/2.0
Risk level: CRITICAL
Reference: STI-20260929-231841-45-138-12-23
show less
Automated web application probing detected against a public web server.
8 suspicious requests
2 cri ...
show moreAutomated web application probing detected against a public web server.
8 suspicious requests
2 critical requests
Observed requests:
GET /zeal.php
GET /xwpg.php
GET /wuasr.php
GET /wso.php
GET /ws61.php
Risk level: VERY_HIGH
Reference: STI-20260929-164817-51-103-136-19
show less
WordPress exploitation attempts detected against a public web server.
84 suspicious requests
65 cri ...
show moreWordPress exploitation attempts detected against a public web server.
84 suspicious requests
65 critical requests
Observed requests:
GET /wp-content/debug.log
GET /wp-config.php.bak
GET /web/.env
GET /vendor/composer/installed.json
GET /v2/.env
Risk level: CRITICAL
Reference: STI-20260929-131803-34-62-82-165
show less
Automated web application probing detected against a public web server.
60 suspicious requests
44 c ...
show moreAutomated web application probing detected against a public web server.
60 suspicious requests
44 critical requests
Observed requests:
POST /v1/graphql
POST /login
POST /graphql
Risk level: CRITICAL
Reference: STI-20260929-104749-34-124-187-59
show less
WordPress exploitation attempts detected against a public web server.
8 suspicious requests
2 criti ...
show moreWordPress exploitation attempts detected against a public web server.
8 suspicious requests
2 critical requests
Observed requests:
GET /xex.php
GET /wsd.php
GET /w.php
GET /wp-content/uploads/
GET /wp-content/plugins/hellopress/wp_filemanager.php
Risk level: HIGH
Reference: STI-20260929-101744-20-198-74-230
show less
Inbound malicious web activity detected and blocked by perimeter IDS/IPS.
Observed 9 blocked IDS/IP ...
show moreInbound malicious web activity detected and blocked by perimeter IDS/IPS.
Observed 9 blocked IDS/IPS events.
Observed IDS/IPS evidence:
- ET USER_AGENTS Suspcious LeakIX User-Agent (l9explore)
Target service: HTTP/HTTPS / TCP port 80,443
Severity: 7/10
First seen: 2026-09-01T20:06:57.184Z
Last seen: 2026-09-29T07:07:54.676Z
Reference: STI-20260929-090754-193-32-204-199
show less
WordPress exploitation attempts detected against a public web server.
9 suspicious requests
3 criti ...
show moreWordPress exploitation attempts detected against a public web server.
9 suspicious requests
3 critical requests
Observed requests:
GET /wp-content/plugins/hellopress/wp_filemanager.php
GET /this_is_a_new_hello_world.php
GET /run.php
GET /radio.php
GET /f35.update.php
Risk level: VERY_HIGH
Reference: STI-20260929-054723-104-208-65-139
show less
Inbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked ...
show moreInbound web command-execution attempt detected and blocked by perimeter IDS/IPS.
Observed 1 blocked IDS/IPS event.
Observed IDS/IPS evidence:
- ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
Target service: HTTP / TCP port 80
Severity: 9/10
First seen: 2026-09-28T21:24:36.142Z
Last seen: 2026-09-28T21:24:36.142Z
Reference: STI-20260928-232436-154-222-8-141
show less
HackingWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.