|
๐บ๐ธ
mawan
|
|
Suspected of having performed illicit activity on LAX server.
|
Web App Attack
|
|
|
๐ฉ๐ช
Neoloop
|
|
[Sun Sep 08 16:15:01.720654 2024] [access_compat:error] [pid 1889034] [client 13.82.132.116:52887] A ...
show more
[Sun Sep 08 16:15:01.720654 2024] [access_compat:error] [pid 1889034] [client 13.82.132.116:52887] AH01797: client denied by server configuration: /var/www/html/namedprague.online/web/wp-content/uploads/memberships_csv_exports/, referer: binance.com
[Sun Sep 08 16:15:01.721789 2024] [access_compat:error] [pid 1889034] [client 13.82.132.116:52887] AH01797: client denied by server configuration: /var/www/html/namedprague.online/web/wp-content/uploads/wc-logs/, referer: binance.com
[Sun Sep 08 16:15:01.722288 2024] [access_compat:error] [pid 1889034] [client 13.82.132.116:52887] AH01797: client denied by server configuration: /var/www/html/namedprague.online/web/wp-content/uploads/woocommerce_uploads/, referer: binance.com
[Sun Sep 08 16:15:01.725626 2024] [access_compat:error] [pid 1889034] [client 13.82.132.116:52887] AH01797: client denied by server configuration: /var/www/html/namedprague.online/web/wp-content/uploads/facebook_for_woocommerce/, referer: binance.com
[Sun Sep 08 16:15:0
...
show less
|
Brute-Force
|
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
|
๐ฆ๐บ
paulshipley.com.au
|
|
paulshipley.com.au:443 13.82.132.116 - - [07/Sep/2024:16:48:00 +1000] "GET /wp-content/uploads/2024/ ...
show more
paulshipley.com.au:443 13.82.132.116 - - [07/Sep/2024:16:48:00 +1000] "GET /wp-content/uploads/2024/09/ HTTP/1.1" 403 3631 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [07/Sep/2024:16:48:07 +1000] "GET /wp-content/uploads/2024/08/ HTTP/1.1" 403 3632 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [07/Sep/2024:16:48:15 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 3167 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [07/Sep/2024:16:48:25 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 403 3630 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
Anonymous
|
|
Backdrop CMS module - malicious activity detected
|
Bad Web Bot
Web App Attack
|
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
|
๐ฆ๐บ
paulshipley.com.au
|
|
paulshipley.com.au:443 13.82.132.116 - - [06/Sep/2024:10:31:21 +1000] "GET /wp-content/uploads/2024/ ...
show more
paulshipley.com.au:443 13.82.132.116 - - [06/Sep/2024:10:31:21 +1000] "GET /wp-content/uploads/2024/09/ HTTP/1.1" 403 3630 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [06/Sep/2024:10:31:28 +1000] "GET /wp-content/uploads/2024/08/ HTTP/1.1" 403 3630 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [06/Sep/2024:10:31:32 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 3167 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
paulshipley.com.au:443 13.82.132.116 - - [06/Sep/2024:10:31:37 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 403 3631 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
tecnicorioja
|
|
wp-login attack [05/Sep/2024:15:36:13
|
Brute-Force
Web App Attack
|
|
|
๐ฆ๐บ
paulshipley.com.au
|
|
stkildashule.org.au:443 13.82.132.116 - - [04/Sep/2024:23:36:33 +1000] "GET /wp-content/uploads/2024 ...
show more
stkildashule.org.au:443 13.82.132.116 - - [04/Sep/2024:23:36:33 +1000] "GET /wp-content/uploads/2024/09/ HTTP/1.1" 403 3721 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
stkildashule.org.au:443 13.82.132.116 - - [04/Sep/2024:23:36:39 +1000] "GET /wp-content/uploads/2024/08/ HTTP/1.1" 403 3722 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
stkildashule.org.au:443 13.82.132.116 - - [04/Sep/2024:23:36:46 +1000] "GET /wp-content/uploads/ HTTP/1.1" 403 3258 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
stkildashule.org.au:443 13.82.132.116 - - [04/Sep/2024:23:36:56 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 403 3721 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.
...
show less
|
Web App Attack
|
|
|
๐ฒ๐พ
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
|
๐บ๐ธ
mawan
|
|
Suspected of having performed illicit activity on LAX server.
|
Web App Attack
|
|
|
Anonymous
|
|
Excessive 404 Traffic Wordpress
|
Web App Attack
|
|
|
Anonymous
|
|
13.82.132.116 - - [03/Sep/2024:12:07:17 -0300] "GET /wp-admin/css/ HTTP/1.1" 302 7645 "binance.com" ...
show more
13.82.132.116 - - [03/Sep/2024:12:07:17 -0300] "GET /wp-admin/css/ HTTP/1.1" 302 7645 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐บ๐ธ
etu brutus
|
|
13.82.132.116 has been banned for [Control Panel abuse]
...
|
Hacking
Brute-Force
|
|
|
๐ซ๐ฎ
JimArchon72
|
|
2024/09/03 00:14:20 "GET /wp-admin/css/ HTTP/1.1"
|
Web App Attack
|
|