Automated abuse report: 28 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: /w ...
show moreAutomated abuse report: 28 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, //aa.php, //av.php, /media.php.
Sample log lines:
[mir-com] [8/17/2026, 5:01:14 PM] GET .mirregistry.com//adminfuns.php 429 20.104.49.167 - 5.434 ms
[helpdesk] 8/18/2026 12:26:03 20.104.49.167 GET /wp-content/plugins/hellopress/wp_filemanager.php 404 187 1.3 ms
[helpdesk] 8/18/2026 12:26:03 20.104.49.167 GET /this_is_a_new_hello_world.php 404 168 1.7 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 60 attack/probe requests from Microsoft Corporation / IN.
Targeted paths: /. ...
show moreAutomated abuse report: 60 attack/probe requests from Microsoft Corporation / IN.
Targeted paths: /.dj/index.php, /.well-known/gecko-litespeed.php, /0x.php, /1.php, /100.php.
Sample log lines:
[helpdesk] 8/18/2026 02:55:14 20.219.2.203 GET /newfile.php 404 150 2.1 ms
[helpdesk] 8/18/2026 02:55:14 20.219.2.203 GET /nf.php 404 145 1.0 ms
[helpdesk] 8/18/2026 11:29:13 20.219.2.203 GET /tool.php 404 147 0.9 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 15 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: /w ...
show moreAutomated abuse report: 15 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, /admin.php, /biufile.php, /coffexium.php.
Sample log lines:
[mir-com] [8/18/2026, 10:58:54 AM] GET .mirregistry.com/yj09.php 404 20.48.236.86 - 2.993 ms
[mir-com] [8/18/2026, 10:58:54 AM] GET .mirregistry.com/scxy.php 404 20.48.236.86 - 2.773 ms
[mir-com] [8/18/2026, 10:58:54 AM] GET .mirregistry.com/ws13.php?p= 404 20.48.236.86 - 4.330 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 43 attack/probe requests from Google LLC / BE.
Targeted paths: /secrets.yml, ...
show moreAutomated abuse report: 43 attack/probe requests from Google LLC / BE.
Targeted paths: /secrets.yml, /secrets.json, /app, /credentials.json, /.npmrc.
Sample log lines:
[shots] 📊 8/17/2026, 15:02:07 34.77.39.126 GET /_ignition/health-check 429 - 0.179 ms
[shots] 📊 8/17/2026, 15:02:07 34.77.39.126 GET /telescope/requests 429 - 0.246 ms
[shots] 📊 8/18/2026, 10:45:04 34.77.39.126 GET /docker-compose.yaml 404 - 2.104 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 41 attack/probe requests from Microsoft Corporation / DE.
Targeted paths: /. ...
show moreAutomated abuse report: 41 attack/probe requests from Microsoft Corporation / DE.
Targeted paths: /.well-known/acme-challenge/index.php, /.well-known/file.php, /.well-known/gecko-litespeed.php, /.well-known/pki-validation/ckyocyyp.php, /.well-known/pki-validation/mariju.php.
Sample log lines:
[helpdesk] 8/16/2026 16:58:59 20.79.204.6 GET /f35.php 404 146 1.2 ms
[helpdesk] 8/16/2026 16:58:59 20.79.204.6 GET /f7.php 404 145 1.3 ms
[helpdesk] 8/18/2026 09:49:00 20.79.204.6 GET /adminfuns.php 404 152 19.2 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 65 attack/probe requests from Microsoft Corporation / DE.
Targeted paths: /z ...
show moreAutomated abuse report: 65 attack/probe requests from Microsoft Corporation / DE.
Targeted paths: /zwso.php, /bthil.php, /admin/function.php, /cron.php, /add_actualites.php.
Sample log lines:
[helpdesk] 8/17/2026 12:49:11 20.52.168.85 GET /post.php 404 147 1.2 ms
[helpdesk] 8/18/2026 09:25:36 20.52.168.85 GET /wp-includes/interactivity-api/index.php 404 178 0.8 ms
[helpdesk] 8/18/2026 09:25:36 20.52.168.85 GET /php8.php 404 147 0.9 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 15 attack/probe requests from Contabo GmbH / FR.
Targeted paths: /config.jso ...
show moreAutomated abuse report: 15 attack/probe requests from Contabo GmbH / FR.
Targeted paths: /config.json.
Sample log lines:
[pixboard] 2026-08-16T14:02:58: PXV 2026-08-16T21:02:58.759Z 169.58.45.73 GET /config.json 404 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 …
[pixboard] 2026-08-18T09:03:01: PXV 2026-08-18T16:03:01.616Z 169.58.45.73 GET /config.json 404 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.…
[pixboard] 2026-08-18T09:03:01: PXV 2026-08-18T16:03:01.616Z 169.58.45.73 GET /config.json 404 - Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.…
Detected by an automated web-server log monitor.
show less
Automated abuse report: 247 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: / ...
show moreAutomated abuse report: 247 attack/probe requests from Microsoft Corporation / CA.
Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, /wint.php, /v2.php, /berlin.php.
Sample log lines:
[helpdesk] 8/17/2026 17:08:58 20.116.17.175 GET /img.php 404 146 0.8 ms
[helpdesk] 8/17/2026 17:08:58 20.116.17.175 GET /we.php 404 145 1.1 ms
[mir-com] [8/18/2026, 9:02:53 AM] GET .mirregistry.com/wp-content/plugins/hellopress/wp_filemanager.php 404 20.116.17.175 - 0.273 ms
Detected by an automated web-server log monitor.
show less
Automated abuse report: 145 attack/probe requests from Microsoft Corporation / IT.
Targeted paths: / ...
show moreAutomated abuse report: 145 attack/probe requests from Microsoft Corporation / IT.
Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /4PJcpMFsD8B.php, /3PJcpMFsD8B.php, /images.php, /admin.php.
Sample log lines:
[helpdesk] 8/16/2026 06:56:22 4.232.94.23 GET /w.php 404 144 1.4 ms
[helpdesk] 8/16/2026 06:56:22 4.232.94.23 GET //aa.php 404 146 1.3 ms
[mir-org] [8/18/2026, 7:42:17 AM] GET .mirregistry.org/wp-content/plugins/hellopress/wp_filemanager.php 404 4.232.94.23 - 0.262 ms
Detected by an automated web-server log monitor.
show less