|
Anonymous
|
|
Common attack or app scan event detected and blocked
|
Port Scan
Hacking
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:19:05:59 +0100] "GET /wp-content/uploads/mc4wp-debug.log HTTP/1.1" 4 ...
show more
157.245.54.229 - - [11/Feb/2023:19:05:59 +0100] "GET /wp-content/uploads/mc4wp-debug.log HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:19:11:37 +0100] "GET /wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:19:14:22 +0100] "GET /wp-login.php HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:18:49:25 +0100] "GET /wp-content/plugins/newsletter/readme.txt HTTP/ ...
show more
157.245.54.229 - - [11/Feb/2023:18:49:25 +0100] "GET /wp-content/plugins/newsletter/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:49:43 +0100] "GET /wp-content/plugins/leadin/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:52:29 +0100] "GET /wp-content/plugins/s3-video/views/video-management/preview_video.php?media=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C%22 HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:18:28:10 +0100] "GET /wp-content/plugins/qards/ HTTP/1.1" 404 5282 " ...
show more
157.245.54.229 - - [11/Feb/2023:18:28:10 +0100] "GET /wp-content/plugins/qards/ HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:30:26 +0100] "GET /wp-content/plugins/translatepress-multilingual/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.4; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:32:02 +0100] "GET /wp-content/plugins/woc-order-alert/assets/admin/js/scripts.js HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:18:07:25 +0100] "GET /admin/public/login.jsp?error=%3Cscript%3Ealert ...
show more
157.245.54.229 - - [11/Feb/2023:18:07:25 +0100] "GET /admin/public/login.jsp?error=%3Cscript%3Ealert(document.domain)%3C/script%3e HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:08:40 +0100] "GET /wp-content/plugins/./simple-image-manipulator/controller/download.php?filepath=/etc/passwd HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:18:15:43 +0100] "GET /wp-content/plugins/shortcodes-ultimate/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:17:49:50 +0100] "GET /wp-content/plugins/adminimize/adminimize_page. ...
show more
157.245.54.229 - - [11/Feb/2023:17:49:50 +0100] "GET /wp-content/plugins/adminimize/adminimize_page.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:51:13 +0100] "GET /wp-content/backup-db/ HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:53:51 +0100] "GET /admin HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:17:21:59 +0100] "POST /wp-content/plugins/wsecure/wsecure-config.php ...
show more
157.245.54.229 - - [11/Feb/2023:17:21:59 +0100] "POST /wp-content/plugins/wsecure/wsecure-config.php HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:25:57 +0100] "GET /wp-content/plugins/jh-404-logger/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:29:35 +0100] "POST /user/register?_wrapper_format=drupal_ajax&ajax_form=1&element_parents=account/mail/%23value HTTP/1.1" 404 5282 "filesearch.philips.com/user/register" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:16:58:15 +0100] "GET /users/sign_in HTTP/1.1" 404 5282 "-" "Mozilla/ ...
show more
157.245.54.229 - - [11/Feb/2023:16:58:15 +0100] "GET /users/sign_in HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2117.157 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:01:45 +0100] "GET /admin/index.html HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:17:07:34 +0100] "GET /wp-content/plugins/whizz/plugins/delete-plugin.php?plugin=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:16:39:14 +0100] "GET /wp-content/plugins/flamingo/readme.txt HTTP/1. ...
show more
157.245.54.229 - - [11/Feb/2023:16:39:14 +0100] "GET /wp-content/plugins/flamingo/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2919.83 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:41:56 +0100] "GET /wp-content/plugins/swipehq-payment-gateway-woocommerce/test-plugin.php?api_url=api_url%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E+ HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.1 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:42:57 +0100] "GET /mysqlbackup.sh HTTP/1.1" 404 523 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.137 Safari/4E423F"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:16:21:22 +0100] "POST /admin/ajax.php?action=login HTTP/1.1" 404 528 ...
show more
157.245.54.229 - - [11/Feb/2023:16:21:22 +0100] "POST /admin/ajax.php?action=login HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1866.237 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:25:50 +0100] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2762.73 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:26:16 +0100] "GET /wp-content/plugins/wordpress-popup/views/admin/ HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:15:59:02 +0100] "GET /wp-content/plugins/fluentform/readme.txt HTTP/ ...
show more
157.245.54.229 - - [11/Feb/2023:15:59:02 +0100] "GET /wp-content/plugins/fluentform/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:04:48 +0100] "GET /admin/login.html?lang=en HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:16:06:48 +0100] "GET /wp-includes/ALFA_DATA/ HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:15:44:04 +0100] "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-fil ...
show more
157.245.54.229 - - [11/Feb/2023:15:44:04 +0100] "GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/2LaenOg4CaSvWvbFgdEzGpB8fRz.svg HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:15:45:14 +0100] "GET /wp-content/plugins/tablepress/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:15:46:49 +0100] "GET /wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:15:21:57 +0100] "GET /wp-content/plugins/google-analytics-for-wordpr ...
show more
157.245.54.229 - - [11/Feb/2023:15:21:57 +0100] "GET /wp-content/plugins/google-analytics-for-wordpress/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:15:23:07 +0100] "GET /admin/login.jsp HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:15:27:24 +0100] "POST /wp-login.php?wlcms-action=preview HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.3319.102 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:14:57:56 +0100] "GET /wp-content/plugins/font-awesome/readme.txt HTT ...
show more
157.245.54.229 - - [11/Feb/2023:14:57:56 +0100] "GET /wp-content/plugins/font-awesome/readme.txt HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:14:59:03 +0100] "GET /wp-content/plugins/jsmol2wp/php/jsmol.php?call=saveFile&data=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&isform=true&mimetype=text/html%20charset=utf-8 HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:15:05:45 +0100] "GET /user/sign_up HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
๐ซ๐ท
Falco
|
|
157.245.54.229 - - [11/Feb/2023:14:45:08 +0100] "GET /user/login HTTP/1.1" 404 5282 "-" "Mozilla/5.0 ...
show more
157.245.54.229 - - [11/Feb/2023:14:45:08 +0100] "GET /user/login HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:14:47:11 +0100] "GET /admin/queues.jsp?QueueFilter=yu1ey%22%3e%3cscript%3ealert(%221%22)%3c%2fscript%3eqb68 HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.59 Safari/537.36"
157.245.54.229 - - [11/Feb/2023:14:50:16 +0100] "GET /wp-content/plugins/video-synchro-pdf/reglages/Menu_Plugins/tout.php?p=tout HTTP/1.1" 404 5282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2866.71 Safari/537.36"
...
show less
|
Web App Attack
|
|