IP Address: 20.116.17.175

Automated web attack: 150 reqs, 142 paths probed, 138 returned 404; probed: 142 .php

ipban 1.9.0 - 5152

Repeated invalid HTTP requests

fail2ban

Repeated invalid HTTP requests

fail2ban

Automated web attack: 290 reqs, 137 paths probed, 266 returned 404; sample: //special.php, //wp-admin/js/index.php, //wp-content/cong.php, /002.php, /005.php, /11PJcpMFsD8B.php, /12.php, /1xmomo.php, /222.php, /3.php, /7.php, /8.php, /99.php, /JawirGenk.php, /a.php, /aa.php, /ab.php, /accesson.php, /acp.php, /adminner.php, /ah25.php, /albin.php, /ano.php, /as.php, /av.php, /az.php, /bal.php, /bdroot.php, /black.php, /ccou.php, /classwithtostring.php, /cok.php, /crgio.php, /css.php, /css/database.php, /dex.php, /df.php, /dk.php, /domvf.php, /dot.php, /dragonshell.php, /echkm.php, /epinyins.php, /f35.update.php, /file5.php, /fine.php, /flox.php, /fpwch.php, /fw/34.php, /fw/faiyy.php, /gecko-new.php, /images.php, /img.php, /index2.php, /jj.php, /kj.php, /load.php, /loader.php, /log.php, /makeasmtp.php, /mcs.php, /memberfuns.php, /mg.php, /mifta.php, /nwflm.php, /ohct.php, /op.php, /ot.php, /output.php, /php5.php, /png.php, /privdayz.php, /pucci.php, /read.php, /red.php

ipban 1.9.0 - Suspicious url /wp-content/plugins/hellopress/wp_filemanager.php ()

fail2ban

Repeated invalid HTTP requests

ipban 1.9.0 - Suspicious url /wp-content/plugins/hellopress/wp_filemanager.php ()

ipban 2.0.0 - 444 0 "-" "-"

ipban 1.9.0 - Suspicious url /wp-content/plugins/hellopress/wp_filemanager.php ()

fail2ban

Repeated invalid HTTP requests

ipban 2.0.0

fail2ban crowdsec-http-attack