๐ฉ๐ช
dwmp
2023-11-09 18:53:28
(2 years ago)
[Thu Nov 09 19:53:22.341345 2023] [authz_core:error] [pid 607420:tid 140561277228800] [client 146.19 ...
show more
[Thu Nov 09 19:53:22.341345 2023] [authz_core:error] [pid 607420:tid 140561277228800] [client 146.190.89.250:39308] AH01630: client denied by server configuration: /var/www/vhosts/neonlauroarte.it/httpdocs/old
[Thu Nov 09 19:53:23.826393 2023] [authz_core:error] [pid 364175:tid 140562344666880] [client 146.190.89.250:40008] AH01630: client denied by server configuration: /var/www/vhosts/neonlauroarte.it/httpdocs/wordpress
[Thu Nov 09 19:53:25.303424 2023] [authz_core:error] [pid 607420:tid 140562369844992] [client 146.190.89.250:40794] AH01630: client denied by server configuration: /var/www/vhosts/neonlauroarte.it/httpdocs/backup
[Thu Nov 09 19:53:26.344773 2023] [authz_core:error] [pid 607420:tid 140561990280960] [client 146.190.89.250:41398] AH01630: client denied by server configuration: /var/www/vhosts/neonlauroarte.it/httpdocs/OLD
[Thu Nov 09 19:53:27.601647 2023] [authz_core:error] [pid 607420:tid 140561319192320] [client 146.190.89.250:42140] AH01630: client denied by server co
...
show less
Brute-Force
๐จ๐ญ
blinx
2023-11-09 18:06:08
(2 years ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
Anonymous
2023-11-09 05:16:09
(2 years ago)
146.190.89.250 (SG/Singapore/-), more than 5 Apache 403 hits
Hacking
๐ฉ๐ช
Mr-Money
2023-11-08 16:26:29
(2 years ago)
146.190.89.250 - - [08/Nov/2023:17:26:28 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 ...
show more
146.190.89.250 - - [08/Nov/2023:17:26:28 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 404 7158 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
iNetWorker
2023-11-08 14:52:41
(2 years ago)
trolling for resource vulnerabilities
Web App Attack
๐ง๐ช
sid3windr
2023-11-07 11:18:52
(2 years ago)
GET /wp-admin/setup-config.php?step=1 (Tarpitted for 1d3h11m26s, wasted 5.6MB)
Web App Attack
๐ง๐ช
sid3windr
2023-11-07 11:18:52
(2 years ago)
GET /wp-admin/setup-config.php?step=1 (Tarpitted for 1d3h11m26s, wasted 5.6MB)
Web App Attack
๐บ๐ธ
cusezar.com
2023-11-07 03:59:03
(2 years ago)
146.190.89.250 /wp-content/plugins/WordPressCore/include.php
Brute-Force
๐บ๐ธ
neroli
2023-11-06 08:13:15
(2 years ago)
Attempted PHP injection
Bad Web Bot
Web App Attack
Anonymous
2023-11-06 08:11:25
(2 years ago)
146.190.89.250 - - [06/Nov/2023:09:11:11 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 489 ...
show more
146.190.89.250 - - [06/Nov/2023:09:11:11 +0100] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
146.190.89.250 - - [06/Nov/2023:09:11:13 +0100] "GET /old/wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
146.190.89.250 - - [06/Nov/2023:09:11:14 +0100] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
146.190.89.250 - - [06/Nov/2023:09:11:17 +0100] "GET /backup/wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
146.190.89.250 - - [06/Nov/2023:09:11:19 +0100] "GET /OLD/wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0 "-" "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)"
146.190.89.250 - - [06/Nov/2023:09:11:20 +0100] "GET /wp/wp-admin/setup-config.php?step=1 HTTP/1.1" 489 0
...
show less
Web App Attack
๐ณ๐ฑ
mawan
2023-11-06 06:13:37
(2 years ago)
Suspected of having performed illicit activity on AMS server.
Web App Attack
๐ฉ๐ช
ps-center
2023-11-05 20:06:23
(2 years ago)
C2: Web Attack GET /wp-admin/setup-config.php?step=1
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
RidgeStar
2023-11-05 20:06:16
(2 years ago)
2023-11-05T12:06:15-08:00: http://pcsra.ridgestar.com/OLD/wp-admin/setup-config.php?step=1
2023-11-0 ...
show more
2023-11-05T12:06:15-08:00: http://pcsra.ridgestar.com/OLD/wp-admin/setup-config.php?step=1
2023-11-05T12:06:14-08:00: http://pcsra.ridgestar.com/wordpress/wp-admin/setup-config.php?step=1
2023-11-05T12:06:14-08:00: http://pcsra.ridgestar.com/backup/wp-admin/setup-config.php?step=1
2023-11-05T12:06:13-08:00: http://pcsra.ridgestar.com/wp-admin/setup-config.php?step=1
2023-11-05T12:06:13-08:00: http://pcsra.ridgestar.com/old/wp-admin/setup-config.php?step=1
show less
Hacking
Web App Attack
๐ฉ๐ช
dwmp
2023-11-05 18:51:16
(2 years ago)
[Sun Nov 05 19:51:11.875953 2023] [authz_core:error] [pid 3052831:tid 140562149611264] [client 146.1 ...
show more
[Sun Nov 05 19:51:11.875953 2023] [authz_core:error] [pid 3052831:tid 140562149611264] [client 146.190.89.250:48480] AH01630: client denied by server configuration: /var/www/vhosts/xforming.it/httpdocs/old
[Sun Nov 05 19:51:12.996945 2023] [authz_core:error] [pid 3052162:tid 140561109473024] [client 146.190.89.250:49006] AH01630: client denied by server configuration: /var/www/vhosts/xforming.it/httpdocs/wordpress
[Sun Nov 05 19:51:13.929908 2023] [authz_core:error] [pid 3052831:tid 140562348353280] [client 146.190.89.250:49432] AH01630: client denied by server configuration: /var/www/vhosts/xforming.it/httpdocs/backup
[Sun Nov 05 19:51:14.963714 2023] [authz_core:error] [pid 3052831:tid 140562191574784] [client 146.190.89.250:49896] AH01630: client denied by server configuration: /var/www/vhosts/xforming.it/httpdocs/OLD
[Sun Nov 05 19:51:15.858732 2023] [authz_core:error] [pid 2779175:tid 140561294014208] [client 146.190.89.250:50256] AH01630: client denied by server configuration: /v
...
show less
Brute-Force
๐บ๐ธ
woof
2023-11-05 17:24:49
(2 years ago)
This IP accessed a banned path "/wp-admin/setup-config.php" with User Agent "Apache/2.4.34 (Ubuntu) ...
show more
This IP accessed a banned path "/wp-admin/setup-config.php" with User Agent "Apache/2.4.34 (Ubuntu) OpenSSL/1.1.1 (internal dummy connection)". (ListenCaddy)
show less
Bad Web Bot
Web App Attack