ipcop.net
19 Mar 2023
2023/01/31 20:39:06 [error] 1157683#1157683: *561329 open() "/usr/share/nginx/html/wp-login.php" fai ... show more 2023/01/31 20:39:06 [error] 1157683#1157683: *561329 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "tortenatelier-rade.de", referrer: "http://tortenatelier-rade.de/wp-login.php"
2023/01/31 20:40:14 [error] 1157683#1157683: *561654 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "freifunk-hueckeswagen.de", referrer: "http://freifunk-hueckeswagen.de/wp-login.php" show less
Fraud VoIP
Brute-Force
ipcop.net
19 Mar 2023
2023/01/31 20:39:06 [error] 1157683#1157683: *561329 open() "/usr/share/nginx/html/wp-login.php" fai ... show more 2023/01/31 20:39:06 [error] 1157683#1157683: *561329 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "tortenatelier-rade.de", referrer: "http://tortenatelier-rade.de/wp-login.php"
2023/01/31 20:40:14 [error] 1157683#1157683: *561654 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "freifunk-hueckeswagen.de", referrer: "http://freifunk-hueckeswagen.de/wp-login.php" show less
Fraud VoIP
Brute-Force
ipcop.net
09 Mar 2023
2023/01/23 14:55:13 [error] 2369524#2369524: *1026250 open() "/usr/share/nginx/html/wp-login.php" fa ... show more 2023/01/23 14:55:13 [error] 2369524#2369524: *1026250 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "www.eversberg.com", referrer: "http://www.eversberg.com/wp-login.php"
2023/01/23 15:02:25 [error] 2369524#2369524: *1026490 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "eversberg.com", referrer: "http://eversberg.com/wp-login.php" show less
Fraud VoIP
Brute-Force
ipcop.net
09 Mar 2023
2023/01/23 14:55:13 [error] 2369524#2369524: *1026250 open() "/usr/share/nginx/html/wp-login.php" fa ... show more 2023/01/23 14:55:13 [error] 2369524#2369524: *1026250 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "www.eversberg.com", referrer: "http://www.eversberg.com/wp-login.php"
2023/01/23 15:02:25 [error] 2369524#2369524: *1026490 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 175.178.160.253, server: _, request: "GET /wp-login.php HTTP/1.1", host: "eversberg.com", referrer: "http://eversberg.com/wp-login.php" show less
Fraud VoIP
Brute-Force
HJ5Ss4Ju
06 Mar 2023
Blocked by Wordfence (SID 4)
Web App Attack
3202931de
06 Mar 2023
xmlrpc.php Brut-Force, Trapped by Honeypot
Brute-Force
Web App Attack
MAGIC
06 Mar 2023
Distributed DDOS attempts for multiple sites
DDoS Attack
Bad Web Bot
Anonymous
05 Mar 2023
$f2bV_matches
Brute-Force
HJ5Ss4Ju
05 Mar 2023
Blocked by Wordfence (SID 6)
Web App Attack
niceshops.com
05 Mar 2023
Web Attack ([05/Mar/2023:05:39:32.525] GET /wp-login.php)
Web App Attack
3202931de
04 Mar 2023
xmlrpc.php Brut-Force, Trapped by Honeypot
Brute-Force
Web App Attack
MAGIC
04 Mar 2023
Distributed DDOS attempts for multiple sites
DDoS Attack
Bad Web Bot
Anonymous
04 Mar 2023
(mod_security) mod_security (id:972687) triggered by 175.178.160.253 (CN/China/-): 2 in the last 360 ... show more (mod_security) mod_security (id:972687) triggered by 175.178.160.253 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Mar 04 18:12:27.539652 2023] [:error] [pid 728048] [client 175.178.160.253:55908] [client 175.178.160.253] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "inovarhost.com"] [uri "/xmlrpc.php"] [unique_id "ZAOKC23D3NOTOPqf4-p_NwAAABg"]
[Sat Mar 04 18:54:24.987687 2023] [:error] [pid 807629] [client 175.178.160.253:56832] [client 175.178.160.253] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "crefito.ababas.com.br"] [uri "/xmlrpc.php"] [unique_id "ZAOT4Fb7-Wg7T-OdzBJ4OgAAACQ"] show less
Port Scan
Anonymous
04 Mar 2023
wp-login.php
Web App Attack
Anonymous
04 Mar 2023
xmlrpc attack blocked attempt from fail2ban
...
Web App Attack