152.42.215.55
recordedScript KiddieTourist
Case file
First seen on 2026-10-05T21:41:03Z, most recently active on 2026-10-05T21:42:20Z.
Recorded 1 attack-shaped request across 1 separate day.
Its traffic fuzzed a common filename under /cgi-bin/, looking for a forgotten legacy CGI script.
Seen on our web sensor.
Scored into the "Script Kiddie" level, carrying the badge Tourist.
Routed via AS14061 (DigitalOcean, LLC), an ASN we classify as hosting.
Recorded internally; has not yet crossed the bar for a public listing.
Enrichment
| rDNS | none |
|---|---|
| ASN | AS14061 — DigitalOcean, LLC |
| ASN type | hosting |
| Country | Singapore (SG) |
| Flags | none observed |
Timeline
- 2026-10-051
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-05T21:42:20Z | web | victorantonov.com | made a request that matched no known pattern | 404 | GET /wp-content/plugins/plugins/cache.php -> 404 |
| 2026-10-05T21:41:03Z | web | victorantonov.com | fuzzed a common filename under /cgi-bin/, looking for a forgotten legacy CGI script | 404 | GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php -> 404 |
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 152.42.215.55. See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
