๐ณ๐ฑ
Marcello
2024-10-11 05:36:00
(1 year ago)
13.60.213.194 - - [09/Oct/2024:08:23:27 +0200] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" " ...
show more
13.60.213.194 - - [09/Oct/2024:08:23:27 +0200] "GET /wp-includes/wp-load.php HTTP/1.1" 301 162 "-" "-" "-"
:
3040 x
:
13.60.213.194 - - [09/Oct/2024:14:54:28 +0200] "GET http://n1.n2.n3.n4/log.php HTTP/1.1" 404 196 "-" "-"
show less
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2024-10-10 02:10:31
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
๐ฎ๐ฉ
Incidents Response Neptus Team
2024-10-09 19:48:00
(1 year ago)
Report Abuse IP
Hacking
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
RLDD
2024-10-09 18:19:36
(1 year ago)
High volume WP login attempts -mai
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-10-09 17:38:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 09 13:37:57.209586 2024] [security2:error] [pid 14371:tid 14371] [client 13.60.213.194:55842] [client 13.60.213.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.justjunglejuice.org"] [uri "/wp-config.php"] [unique_id "Zwa_dXkbOKJ_fAiivQj73wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
penjaga BRIN
2024-10-09 17:15:51
(1 year ago)
-240
Web App Attack
๐ช๐ธ
robotstxt
2024-10-09 15:51:42
(1 year ago)
13.60.213.194 - - [09/Oct/2024:15:51:38 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 33988 "-" rt ...
show more
13.60.213.194 - - [09/Oct/2024:15:51:38 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 33988 "-" rt="0.089" "-" "-" h="www.comovalacosa.com" sn="www.comovalacosa.com" ru="/cgi-bin/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/comovalacosa82.sock" us="404" uct="0.000" urt="0.090"
13.60.213.194 - - [09/Oct/2024:15:51:39 +0000] "GET /cgi-bin/themes.php HTTP/1.1" 404 33988 "-" rt="0.092" "-" "-" h="www.comovalacosa.com" sn="www.comovalacosa.com" ru="/cgi-bin/themes.php" u="/index.php" ucs="-" ua="unix:/var/run/php/comovalacosa82.sock" us="404" uct="0.000" urt="0.092"
13.60.213.194 - - [09/Oct/2024:15:51:39 +0000] "GET /cgi-bin/themes.php HTTP/1.1" 404 33988 "-" rt="0.092" "-" "-" h="www.comovalacosa.com" sn="www.comovalacosa.com" ru="/cgi-bin/themes.php" u="/index.php" ucs="-" ua="unix:/var/run/php/comovalacosa82.sock" us="404" uct="0.000" urt="0.092"
13.60.213.194 - - [09/Oct/2024:15:51:38 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 33988 "-" "-" "-"
...
show less
Bad Web Bot
Anonymous
2024-10-09 14:54:00
(1 year ago)
13.60.213.194 (SE/Sweden/ec2-13-60-213-194.eu-north-1.compute.amazonaws.com) blocked with too many c ...
show more
13.60.213.194 (SE/Sweden/ec2-13-60-213-194.eu-north-1.compute.amazonaws.com) blocked with too many connections
show less
DDoS Attack
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-09 14:30:22
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 09 10:30:18.138883 2024] [security2:error] [pid 30091:tid 30091] [client 13.60.213.194:64088] [client 13.60.213.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.macooh.com"] [uri "/wp-config.php"] [unique_id "ZwaTesRRjMjmvgNLq7-jmwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2024-10-09 14:26:22
(1 year ago)
13.60.213.194 - - [09/Oct/2024:17:26:21 +0300] "GET /wp-includes/wp-load.php HTTP/1.1" 404 273 "-" " ...
show more
13.60.213.194 - - [09/Oct/2024:17:26:21 +0300] "GET /wp-includes/wp-load.php HTTP/1.1" 404 273 "-" "-"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-09 13:21:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 09 09:21:09.087506 2024] [security2:error] [pid 21944:tid 21944] [client 13.60.213.194:55983] [client 13.60.213.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/wp-config.php"] [unique_id "ZwaDRdNkXJAJqlhifMhpXQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
jasperedv.de
2024-10-09 12:46:33
(1 year ago)
Apache Login - Brutforcing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-10-09 12:19:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.com ...
show more
(mod_security) mod_security (id:210492) triggered by 13.60.213.194 (ec2-13-60-213-194.eu-north-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 09 08:19:42.207658 2024] [security2:error] [pid 7368:tid 7368] [client 13.60.213.194:52157] [client 13.60.213.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beetreelabs.com"] [uri "/wp-config.php"] [unique_id "ZwZ03ihxyhs9yEnblCNX_AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Roderic
2024-10-09 12:09:09
(1 year ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 13.60.213.194 (SE/Swed ...
show more
(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 13.60.213.194 (SE/Sweden/ec2-13-60-213-194.eu-north-1.compute.amazonaws.com)
show less
Port Scan
๐ช๐ธ
robotstxt
2024-10-09 12:06:21
(1 year ago)
13.60.213.194 - - [09/Oct/2024:12:05:22 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 27743 "-" rt ...
show more
13.60.213.194 - - [09/Oct/2024:12:05:22 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 404 27743 "-" rt="0.049" "-" "-" h="blog.wpsearch.org" sn="blog.wpsearch.org" ru="/cgi-bin/wp-login.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpsearch82.sock" us="404" uct="0.000" urt="0.049"
13.60.213.194 - - [09/Oct/2024:12:05:22 +0000] "GET /cgi-bin/themes.php HTTP/1.1" 404 27743 "-" rt="0.049" "-" "-" h="blog.wpsearch.org" sn="blog.wpsearch.org" ru="/cgi-bin/themes.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpsearch82.sock" us="404" uct="0.000" urt="0.049"
13.60.213.194 - - [09/Oct/2024:12:05:31 +0000] "GET /cgi-bin/file.php HTTP/1.1" 404 27743 "-" rt="0.065" "-" "-" h="blog.wpsearch.org" sn="blog.wpsearch.org" ru="/cgi-bin/file.php" u="/index.php" ucs="-" ua="unix:/var/run/php/wpsearch82.sock" us="404" uct="0.000" urt="0.065"
13.60.213.194 - - [09/Oct/2024:12:05:34 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 404 27743 "-" rt="0.051" "-" "-" h="blog.wpsearch.org" sn="blog.wpsearch.org" r
...
show less
Bad Web Bot