๐ง๐ช
taivas.nl
2023-08-29 04:32:41
(3 years ago)
Many_bad_calls
Web App Attack
๐ฉ๐ช
mxinfra
2023-08-29 03:00:25
(3 years ago)
Fail2Ban triggered by apache-auth Tue 29 Aug 2023 05:00:25 AM CEST
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
www.blocklist.de
2023-08-29 02:40:44
(3 years ago)
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/sodium_compat/src/server-name32/Cu ...
show more
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/sodium_compat/src/server-name32/Curve25519/Ge/index.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/SimplePie/Cache/lofter.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:40 +0000] "GET /wp-includes/SimplePie/XML/lofter.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:40 +0000] "GET /wordpress-seo/vendor/xrstf/composer-php52/lib/xrstf/Composer52/wp-admin.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605........
------------------------------
show less
DDoS Attack
๐ญ๐บ
DumaNet
2023-08-29 02:24:16
(3 years ago)
WordPress plugin attack attempts.
Date: 2023 Aug 28. 23:58:32
Source IP: 104.238.213.55
Portion ...
show more
WordPress plugin attack attempts.
Date: 2023 Aug 28. 23:58:32
Source IP: 104.238.213.55
Portion of the log(s):
104.238.213.55 - [28/Aug/2023:23:50:25 +0200] "GET /wp-admin/css/colors/midnight/xmlrpcs.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:24 +0200] "GET /wp-admin/css/colors/light/load.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:24 +0200] "GET /wp-admin/css/colors/ectoplasm/jsdindex.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:24 +0200] "GET /wp-admin/css/colors/light/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko)
show less
Web App Attack
๐ญ๐บ
DumaNet
2023-08-29 02:00:38
(3 years ago)
WordPress plugin attack attempts.
Date: 2023 Aug 28. 23:50:18
Source IP: 104.238.213.55
Portion ...
show more
WordPress plugin attack attempts.
Date: 2023 Aug 28. 23:50:18
Source IP: 104.238.213.55
Portion of the log(s):
104.238.213.55 - [28/Aug/2023:23:50:16 +0200] "GET /wp-content/plugins/better-search-replace/languages/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:16 +0200] "GET /wp-content/plugins/js_composer/assets/fonts/vc_icons/fonts/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:16 +0200] "GET /wp-admin/img/php-compat/blocks/themes/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
104.238.213.55 - [28/Aug/2023:23:50:16 +0200] "GET /wp-includes/js/tinymce/skins/lightgray/fonts/index.php HTTP/1.1" 404 153 "-" "Mozilla/5.0
show less
Web App Attack
๐บ๐ธ
etu brutus
2023-08-29 01:49:54
(3 years ago)
104.238.213.55 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
maxxsense
2023-08-29 01:38:42
(3 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 104.238.213.55 (US/Unite ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 104.238.213.55 (US/United States/-)
show less
Port Scan
๐ฉ๐ช
ps-center
2023-08-29 01:37:39
(3 years ago)
DIS: Web Attack GET /wp-includes/js/tinymce/skins/lightgray/img/index.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
SCHAPPY
2023-08-29 01:35:02
(3 years ago)
Mutliple attempts to access web resources unauthorized, HTTP code 403.
Web App Attack
๐ณ๐ฑ
Roderic
2023-08-29 01:27:51
(3 years ago)
(mod_security) mod_security triggered on hostname [redacted] 104.238.213.55 (US/United States/-)
SQL Injection
๐ฆ๐บ
paulshipley.com.au
2023-08-29 01:03:56
(3 years ago)
angleseaarthouse.com.au:443 104.238.213.55 - - [29/Aug/2023:11:03:20 +1000] "GET /wp-includes/js/tin ...
show more
angleseaarthouse.com.au:443 104.238.213.55 - - [29/Aug/2023:11:03:20 +1000] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 620 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
angleseaarthouse.com.au:443 104.238.213.55 - - [29/Aug/2023:11:03:22 +1000] "GET /wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/ HTTP/1.1" 403 620 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
angleseaarthouse.com.au:443 104.238.213.55 - - [29/Aug/2023:11:03:24 +1000] "GET /wp-includes/js/tinymce/skins/wordpress/images/ HTTP/1.1" 403 620 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
angleseaarthouse.com.au:443 104.238.213.55 - - [29/Aug/2023:11:03:25 +1000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/ HTTP/1.1" 403 620 "-" "Mozilla/5.0 (Macintosh;
...
show less
Web App Attack
๐ฌ๐ง
Steve
2023-08-28 21:46:48
(3 years ago)
Too many 4xx responses in a short time
Brute-Force
๐ฉ๐ช
www.blocklist.de
2023-08-28 21:20:18
(3 years ago)
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/sodium_compat/src/server-name32/Cu ...
show more
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/sodium_compat/src/server-name32/Curve25519/Ge/index.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:39 +0000] "GET /wp-includes/SimplePie/Cache/lofter.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:40 +0000] "GET /wp-includes/SimplePie/XML/lofter.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15" "-"
104.238.213.55 - - [28/Aug/2023:21:17:40 +0000] "GET /wordpress-seo/vendor/xrstf/composer-php52/lib/xrstf/Composer52/wp-admin.php HTTP/1.1" 0 301 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605........
------------------------------
show less
DDoS Attack
๐ณ๐ฑ
TEMPO
2023-08-28 18:30:00
(3 years ago)
Multiple hacking attempts!
DDoS Attack
Hacking
Brute-Force
Anonymous
2023-08-28 18:11:28
(3 years ago)
104.238.213.55 - - [28/Aug/2023:19:11:27 +0100] "GET /wp-config-sample.php HTTP/1.1" 403 344 "-" "Mo ...
show more
104.238.213.55 - - [28/Aug/2023:19:11:27 +0100] "GET /wp-config-sample.php HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15"
...
show less
Web App Attack