|
π©πͺ
ps-center
|
|
C1: Web Attack GET /wp-content/about.php
|
Web Spam
Hacking
Bad Web Bot
Web App Attack
|
|
|
πΊπΈ
rsa
|
|
GET /repeater.php HTTP/1.1
|
Hacking
Brute-Force
Web App Attack
|
|
|
π§πͺ
taivas.nl
|
|
Wordpress_Attack
|
Web App Attack
|
|
|
π²πΎ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
|
πΊπΈ
RidgeStar
|
|
2023-12-29T06:20:07-08:00: http://ridgestar.com/wp-admin/radio.php
2023-12-29T06:20:05-08:00: http:/ ...
show more
2023-12-29T06:20:07-08:00: http://ridgestar.com/wp-admin/radio.php
2023-12-29T06:20:05-08:00: http://ridgestar.com/wp-includes/js/tinymce/skins/lightgray/img/index.php
2023-12-29T06:20:05-08:00: http://ridgestar.com/wp-admin/js/widgets/about.php
2023-12-29T06:20:05-08:00: http://ridgestar.com/wp-admin/css/colors/blue/uploader.php
show less
|
Hacking
Web App Attack
|
|
|
π²πΎ
syokadmin
|
|
103.90.162.27 (US/United States/-), more than 2 Apache 403 hits in the last 3600 secs
|
Brute-Force
|
|
|
ππΊ
DumaNet
|
|
Web app attack attempts, scanning for vulnerability.
Date: 2023 Sep 21. 01:35:50
Source IP: 103.90 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2023 Sep 21. 01:35:50
Source IP: 103.90.162.27
Portion of the log(s):
103.90.162.27 - [21/Sep/2023:01:35:48 +0200] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:35:48 +0200] "GET /wp-admin/includes/class-wp-media-list-data.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:35:48 +0200] "GET /xltavrat.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:35:48 +0200] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version
show less
|
Web App Attack
|
|
|
ππΊ
DumaNet
|
|
Web app attack attempts, scanning for vulnerability.
Date: 2023 Sep 21. 01:30:56
Source IP: 103.90 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2023 Sep 21. 01:30:56
Source IP: 103.90.162.27
Portion of the log(s):
103.90.162.27 - [21/Sep/2023:01:30:46 +0200] "GET /alfa-rex.php7 HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:30:46 +0200] "GET /alfa-rex.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:30:46 +0200] "GET /beence.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01:30:46 +0200] "GET /wp-admin/css/colors/ocean/wp-crons.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
103.90.162.27 - [21/Sep/2023:01
show less
|
Web App Attack
|
|
|
π³π±
TEMPO
|
|
Multiple hacking attempts
|
DDoS Attack
Hacking
Brute-Force
|
|
|
π¦πΊ
paulshipley.com.au
|
|
bermanfamily.com.au:443 103.90.162.27 - - [21/Sep/2023:11:38:59 +1000] "GET /MxaXXXXXXXk-hxdxamx.php ...
show more
bermanfamily.com.au:443 103.90.162.27 - - [21/Sep/2023:11:38:59 +1000] "GET /MxaXXXXXXXk-hxdxamx.php HTTP/1.1" 404 5152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
bermanfamily.com.au:443 103.90.162.27 - - [21/Sep/2023:11:39:00 +1000] "GET /dropdown.php HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
bermanfamily.com.au:443 103.90.162.27 - - [21/Sep/2023:11:39:01 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 404 1801 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
bermanfamily.com.au:443 103.90.162.27 - - [21/Sep/2023:11:39:02 +1000] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 404 1801 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)
...
show less
|
Web App Attack
|
|
|
Anonymous
|
|
|
Web Spam
Email Spam
Blog Spam
Bad Web Bot
Web App Attack
|
|
|
π©πͺ
ps-center
|
|
MYH: Web Attack GET /wp-content/plugins/revslider/includes/external/page/index.php
|
Web Spam
Hacking
Bad Web Bot
Web App Attack
|
|
|
πΊπΈ
mnsf
|
|
Too many Status 40X (154)
Scanning/Probing (16)
Request Overload (315)
|
Brute-Force
Web App Attack
|
|
|
πΊπΈ
ph
|
|
Bad web bot attempting to run wp-includes on non-WP site
|
Hacking
Bad Web Bot
Web App Attack
|
|
|
π©πͺ
niceshops.com
|
|
Web Attack ([21/Sep/2023:01:39:01.753] GET /wp-includes/js/tinymce/skins/lightgray/img/index.php)
|
Web App Attack
|
|