IP Address: 52.238.210.254

ipban 3.0.0

Repeated invalid HTTP requests

Automated web attack: 150 reqs, 119 paths probed, 132 returned 404; probed: 107 .php, 7 other, 5 admin

Repeated invalid HTTP requests

fail2ban

Automated web attack: 150 reqs, 119 paths probed, 132 returned 404; sample: /.alf.php, /.trash7206/index.php, /.well-known/logs233/index.php, /0x.php, /1.php, /100.php, /222.php, /404.php, /7.php, /Geforce.php, /aa.php, /aaa.php, /abcd.php, /about.php, /about/function.php, /admin.php, /adminfuns.php, /akc.php, /alfa.php, /as.php, /asasx.php, /atomlib.php, /autoload_classmap.php, /autoload_classmap/function.php, /av.php, /bolt.php, /buy.php, /cgi-bin/, /chosen.php, /class-t.api.php, /class.php, /classwithtostring.php, /cong.php, /css/classwithtostring.php, /db.php, /dropdown.php, /edit.php, /f35.php, /ff1.php, /fff.php, /file.php, /file2.php, /file5.php, /filemanager.php, /flower.php, /fpwch.php, /function/function.php, /gg.php, /goods.php, /hosty.php, /hplfuns.php, /htaccess.php, /images/class-config.php, /images/wso.php, /index/function.php, /info.php, /inputs.php, /ioxi-o.php, /k.php, /lite.php, /lock360.php, /mac.php, /makeasmtp.php

ipban 1.9.0 - Suspicious url /wp-content/plugins/hellopress/wp_filemanager.php ()

ipban 2.0.1

Repeated invalid HTTP requests

ipban 2.0.0

fail2ban

Repeated invalid HTTP requests

ipban 2.0.0 - 444 0 "-" "-"

fail2ban rfi-attack