Anonymous
2026-09-02 12:18:10
(15 hours ago)
Attack detected: 51.103.152.96 [2026-09-02]
Categories: 21
--- webshell/admin probe (5 hits) ---
51. ...
show more
Attack detected: 51.103.152.96 [2026-09-02]
Categories: 21
--- webshell/admin probe (5 hits) ---
51.103.152.96 - - [05/Aug/2026:01:47:30 +0000] "GET /wp-conflg.php?p= HTTP/1.1" 404 174 "-" "-"
51.103.152.96 - - [05/Aug/2026:01:47:31 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 412 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:01 +0000] "GET /wp-conflg.php?p= HTTP/1.1" 301 330 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:01 +0000] "GET /wp-conflg.php HTTP/1.1" 404 72779 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:09 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 72809 "-" "-"
show less
Web App Attack
๐บ๐ธ
Rayulcifer
2026-09-01 07:01:42
(1 day ago)
[Wed Aug 05 01:04:34.523884 2026] [authz_core:error] [pid 2400050:tid 126187330328256] [client 51.10 ...
show more
[Wed Aug 05 01:04:34.523884 2026] [authz_core:error] [pid 2400050:tid 126187330328256] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Wed Aug 05 01:04:34.618630 2026] [authz_core:error] [pid 2400050:tid 126189514970816] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Wed Aug 05 01:04:34.710578 2026] [authz_core:error] [pid 2400050:tid 126185375778496] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/motu.php
[Wed Aug 05 01:04:34.801971 2026] [authz_core:error] [pid 2400050:tid 126187305150144] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-blog.php
[Wed Aug 05 01:04:35.074307 2026] [authz_core:error] [pid 2400050:tid 126189083551424] [client 51.103.152.96:35963] AH01630: client
...
show less
Brute-Force
SSH
๐บ๐ธ
Rayulcifer
2026-08-27 06:36:09
(6 days ago)
[Wed Aug 05 01:04:34.523884 2026] [authz_core:error] [pid 2400050:tid 126187330328256] [client 51.10 ...
show more
[Wed Aug 05 01:04:34.523884 2026] [authz_core:error] [pid 2400050:tid 126187330328256] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Wed Aug 05 01:04:34.618630 2026] [authz_core:error] [pid 2400050:tid 126189514970816] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Wed Aug 05 01:04:34.710578 2026] [authz_core:error] [pid 2400050:tid 126185375778496] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/motu.php
[Wed Aug 05 01:04:34.801971 2026] [authz_core:error] [pid 2400050:tid 126187305150144] [client 51.103.152.96:35963] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-blog.php
[Wed Aug 05 01:04:35.074307 2026] [authz_core:error] [pid 2400050:tid 126189083551424] [client 51.103.152.96:35963] AH01630: client
...
show less
Brute-Force
SSH
Anonymous
2026-08-25 08:22:31
(1 week ago)
Scanner hitting /wp-content/plugins/hellopress/wp_filemanager.php on () โ aaguard
Brute-Force
Port Scan
๐ซ๐ท
Catalin Negru
2026-08-21 14:09:53
(1 week ago)
2026-07-31 21:52:24,321 fail2ban.actions [2285684]: NOTICE [apache-security] Ban 51.103.152. ...
show more
2026-07-31 21:52:24,321 fail2ban.actions [2285684]: NOTICE [apache-security] Ban 51.103.152.96
2026-07-31 21:52:24,371 fail2ban.actions [2285684]: NOTICE [web-scanner] Ban 51.103.152.96
2026-07-31 21:52:24,492 fail2ban.actions [2285684]: NOTICE [apache-404] Ban 51.103.152.96
2026-07-31 21:52:24,774 fail2ban.actions [2285684]: NOTICE [apache-scan] Ban 51.103.152.96
2026-07-31 21:52:26,865 fail2ban.actions [2285684]: NOTICE [wordpress-scanner] Ban 51.103.152.96
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
arnisolutions
2026-08-19 12:03:03
(2 weeks ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 6 day(s) between 2026-08-14 and 2026-08-18 (UTC).
show less
Web App Attack
Hacking
Anonymous
2026-08-18 12:05:34
(2 weeks ago)
Attack detected: 51.103.152.96 [2026-08-18]
Categories: 21
--- webshell/admin probe (5 hits) ---
51. ...
show more
Attack detected: 51.103.152.96 [2026-08-18]
Categories: 21
--- webshell/admin probe (5 hits) ---
51.103.152.96 - - [05/Aug/2026:01:47:30 +0000] "GET /wp-conflg.php?p= HTTP/1.1" 404 174 "-" "-"
51.103.152.96 - - [05/Aug/2026:01:47:31 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 412 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:01 +0000] "GET /wp-conflg.php?p= HTTP/1.1" 301 330 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:01 +0000] "GET /wp-conflg.php HTTP/1.1" 404 72779 "-" "-"
51.103.152.96 - - [05/Aug/2026:00:44:09 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 72809 "-" "-"
show less
Web App Attack
๐ฉ๐ช
SiyCah
2026-08-16 03:00:03
(2 weeks ago)
IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-16 02:07:01
(2 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,wa01,wa02]
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-16 01:08:01
(2 weeks ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx02]
Bad Web Bot
Web App Attack
๐ฌ๐ง
myintarweb
2026-08-15 00:02:07
(2 weeks ago)
51.103.152.96 - mail.madmick.co.uk [31/Jul/2026:22:10:41 +0100] 80 "GET /wp-content/plugins/hellopre ...
show more
51.103.152.96 - mail.madmick.co.uk [31/Jul/2026:22:10:41 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1603 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
SiyCah
2026-08-14 03:00:02
(2 weeks ago)
IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
๐ฎ๐ณ
evicky2002
2026-08-13 06:00:04
(2 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฉ๐ช
Grossmann-Gruppe
2026-08-12 18:07:29
(3 weeks ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
๐ฉ๐ช
SiyCah
2026-08-12 03:00:02
(3 weeks ago)
IP banned by fail2ban; banned in jail apache-auth. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack