Secure Gateway®️
2023-11-12 22:04:42
(11 months ago)
Report By Secure Gateway Security Team: SQL Injection Attempt Detected
Web App Attack
OOTD
2023-11-12 11:11:37
(11 months ago)
WP-login.php hacking attempt
Web App Attack
HERA - Operations
2023-11-12 09:13:22
(11 months ago)
bau-arge - searching for vulnerable scripts: wp-class.php 2023/11/12 09:13:21
Web App Attack
URAN Publishing Service
2023-11-12 08:58:37
(11 months ago)
13.95.88.64 - - [12/Nov/2023:10:58:36 +0200] "GET //wp-admin/network/upfile.php HTTP/1.1" 404 278 "- ... show more 13.95.88.64 - - [12/Nov/2023:10:58:36 +0200] "GET //wp-admin/network/upfile.php HTTP/1.1" 404 278 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
... show less
Web App Attack
Anonymous
2023-11-12 07:13:52
(11 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 13.95.88.64 (NL/Netherla ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 13.95.88.64 (NL/Netherlands/-) show less
Port Scan
octageeks.com
2023-11-12 05:24:19
(11 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
octageeks.com
2023-11-12 05:24:17
(11 months ago)
Wordpress malicious attack:[octa404]
Web App Attack
Anonymous
2023-11-12 04:52:03
(11 months ago)
Fail2Ban apache-noscript
Bad Web Bot
taivas.nl
2023-11-12 03:32:10
(11 months ago)
Bad_requests
Bad Web Bot
Rizzy
2023-11-12 02:11:05
(11 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
dwmp
2023-11-12 00:48:47
(11 months ago)
[Sun Nov 12 01:47:50.990837 2023] [authz_core:error] [pid 1701640:tid 140562631186176] [client 13.95 ... show more [Sun Nov 12 01:47:50.990837 2023] [authz_core:error] [pid 1701640:tid 140562631186176] [client 13.95.88.64:1682] AH01630: client denied by server configuration: /var/www/vhosts/mantareef.it/httpdocs/wp-content/plugins/Cache, referer: http://lifestylemicrofibra.it//wp-content/plugins/Cache/Cache.php
[Sun Nov 12 01:47:51.102863 2023] [authz_core:error] [pid 1701640:tid 140562631186176] [client 13.95.88.64:1682] AH01630: client denied by server configuration: /var/www/vhosts/mantareef.it/httpdocs/wp-config-sample.php, referer: http://lifestylemicrofibra.it//wp-config-sample.php
[Sun Nov 12 01:48:27.857906 2023] [authz_core:error] [pid 1701640:tid 140562631186176] [client 13.95.88.64:1682] AH01630: client denied by server configuration: /var/www/vhosts/mantareef.it/httpdocs/wp-content/uploads/wso112233.php, referer: http://lifestylemicrofibra.it//wp-content/uploads/wso112233.php
[Sun Nov 12 01:48:36.868696 2023] [authz_core:error] [pid 1701640:tid 140562631186176] [client 13.95.88.64:1682]
... show less
Brute-Force
dwmp
2023-11-11 22:43:25
(11 months ago)
[Sat Nov 11 23:42:46.147098 2023] [authz_core:error] [pid 1359953:tid 140562381813504] [client 13.95 ... show more [Sat Nov 11 23:42:46.147098 2023] [authz_core:error] [pid 1359953:tid 140562381813504] [client 13.95.88.64:2418] AH01630: client denied by server configuration: /var/www/vhosts/primerestaurant.it/httpdocs/wp-content/plugins/Cache, referer: http://primerestaurant.it//wp-content/plugins/Cache/Cache.php
[Sat Nov 11 23:42:46.173122 2023] [authz_core:error] [pid 1359953:tid 140562381813504] [client 13.95.88.64:2418] AH01630: client denied by server configuration: /var/www/vhosts/primerestaurant.it/httpdocs/wp-config-sample.php, referer: http://primerestaurant.it//wp-config-sample.php
[Sat Nov 11 23:43:12.604208 2023] [authz_core:error] [pid 1359953:tid 140562381813504] [client 13.95.88.64:2418] AH01630: client denied by server configuration: /var/www/vhosts/primerestaurant.it/httpdocs/wp-content/uploads/wso112233.php, referer: http://primerestaurant.it//wp-content/uploads/wso112233.php
[Sat Nov 11 23:43:18.849468 2023] [authz_core:error] [pid 1359953:tid 140562381813504] [client 13.95.88.64
... show less
Brute-Force
URAN Publishing Service
2023-11-11 22:24:56
(11 months ago)
13.95.88.64 - - [12/Nov/2023:00:24:55 +0200] "GET //wp-admin/network/upfile.php HTTP/1.1" 404 270 "- ... show more 13.95.88.64 - - [12/Nov/2023:00:24:55 +0200] "GET //wp-admin/network/upfile.php HTTP/1.1" 404 270 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
13.95.88.64 - - [12/Nov/2023:00:24:55 +0200] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 404 270 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
... show less
Web App Attack
Anonymous
2023-11-11 21:27:02
(11 months ago)
Unauthorized SSH login attempts
Brute-Force
SSH
francoisunix
2023-11-11 21:16:23
(11 months ago)
13.95.88.64 - - [11/Nov/2023:21:16:19 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 177 "http://tag ... show more 13.95.88.64 - - [11/Nov/2023:21:16:19 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 177 "http://tagaz.fr/wp-content/uploads/" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
13.95.88.64 - - [11/Nov/2023:21:16:20 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftagaz.fr%2Fwp-admin%2F&reauth=1 HTTP/1.1" 401 11977 "https://tagaz.fr/wp-admin/" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
13.95.88.64 - - [11/Nov/2023:21:16:21 +0000] "GET /wp-admin/js/ HTTP/1.1" 403 177 "http://tagaz.fr/wp-admin/js/" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" show less
Web App Attack