Known Webshell Filename Probe for 2026-07-06
Last Updated: 00:00 UTC
Direct requests for filenames used by common PHP webshells and file managers (ALFA, WSO, b374k, xleet, wp_filemanager and others). Scanners check whether a site was already backdoored by someone else, so they can take over the existing shell instead of exploiting the site themselves.
MITRE ATT&CK
Tactic: Persistence (TA0003)
Technique: T1505.003 — Server Software Component: Web Shell
Observed URIs
Attackers by Country
| United Kingdom | 7 | 21.9% |
| Japan | 7 | 21.9% |
| India | 5 | 15.6% |
| Brazil | 3 | 9.4% |
| Singapore | 3 | 9.4% |
| Hong Kong | 2 | 6.2% |
| South Korea | 2 | 6.2% |
| Canada | 2 | 6.2% |
| Poland | 1 | 3.1% |
IP Address : ASN : City/Provider
-
104.208.96.194 : AS8075 Microsoft Corporation : Hong Kong
-
185.192.71.146 : AS206092 F.n.s. Holdings Limited : London
-
185.192.71.160 : AS206092 F.n.s. Holdings Limited : London
-
185.92.25.129 : AS206092 F.n.s. Holdings Limited : Slough
-
185.92.25.41 : AS206092 F.n.s. Holdings Limited : Slough
-
191.237.255.150 : AS8075 Microsoft Corporation : Campinas
-
195.3.220.7 : AS201814 MEVSPACE sp. z o.o. : Poland
-
20.18.31.88 : AS8075 Microsoft Corporation : Tokyo
-
20.189.203.136 : AS8075 Microsoft Corporation : Osaka
-
20.194.7.113 : AS8075 Microsoft Corporation : Seoul
-
20.198.5.248 : AS8075 Microsoft Corporation : Pune
-
20.198.90.154 : AS8075 Microsoft Corporation : Pune
-
20.204.42.226 : AS8075 Microsoft Corporation : Pune
-
20.206.105.139 : AS8075 Microsoft Corporation : Campinas
-
20.212.228.38 : AS8075 Microsoft Corporation : Singapore
-
20.214.163.77 : AS8075 Microsoft Corporation : Seoul
-
20.226.82.21 : AS8075 Microsoft Corporation : Campinas
-
20.48.255.163 : AS8075 Microsoft Corporation : Toronto
-
20.63.208.190 : AS8075 Microsoft Corporation : Osaka
-
20.89.233.37 : AS8075 Microsoft Corporation : Osaka
-
20.89.43.104 : AS8075 Microsoft Corporation : Tokyo
-
4.188.251.230 : AS8075 Microsoft Corporation : Pune
-
4.193.146.239 : AS8075 Microsoft Corporation : Singapore
-
4.193.171.159 : AS8075 Microsoft Corporation : Singapore
-
40.74.69.175 : AS8075 Microsoft Corporation : Osaka
-
52.138.1.81 : AS8075 Microsoft Corporation : Toronto
-
52.140.125.52 : AS8075 Microsoft Corporation : Pune
-
52.184.100.96 : AS8075 Microsoft Corporation : Hong Kong
-
52.243.62.144 : AS8075 Microsoft Corporation : Tokyo
-
91.230.225.104 : AS206092 F.n.s. Holdings Limited : London
-
91.230.225.105 : AS206092 F.n.s. Holdings Limited : London
-
91.230.225.111 : AS206092 F.n.s. Holdings Limited : London