Ba-Yu
2023-12-04 09:21:07
(6 days ago)
WordPress bruteforce
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
mawan
2023-12-03 20:45:54
(1 week ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
bmino.pl
2023-12-03 16:24:01
(1 week ago)
Autoban 187.49.9.52 BLOCK ACCESS
Brute-Force
corthorn
2023-12-02 23:43:45
(1 week ago)
187.49.9.52 - - [03/Dec/2023:00:43:44 +0100] "POST /xmlrpc.php HTTP/1.1" 200 425 "-" "Mozilla/5.0 (X ... show more 187.49.9.52 - - [03/Dec/2023:00:43:44 +0100] "POST /xmlrpc.php HTTP/1.1" 200 425 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
... show less
Brute-Force
Malta
2023-12-02 21:23:22
(1 week ago)
187.49.9.52 - - [02/Dec/2023:22:23:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu ... show more 187.49.9.52 - - [02/Dec/2023:22:23:22 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
Brute-force password attempt show less
Hacking
Brute-Force
Web App Attack
Swiptly
2023-12-02 11:40:56
(1 week ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
maxxsense
2023-12-02 10:20:01
(1 week ago)
(wordpress) Failed wordpress login from 187.49.9.52 (CL/Chile/server1.hostingcom.cl)
Brute-Force
Anonymous
2023-12-02 07:33:48
(1 week ago)
187.49.9.52 - - [25/Nov/2023:21:38:57 +0100] "GET /xmlrpc.php HTTP/1.1" 403 4387 "http://elomix.de/x ... show more 187.49.9.52 - - [25/Nov/2023:21:38:57 +0100] "GET /xmlrpc.php HTTP/1.1" 403 4387 "http://elomix.de/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
187.49.9.52 - - [02/Dec/2023:08:33:46 +0100] "GET /wp-login.php HTTP/1.1" 200 6081 "http://elomix.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
187.49.9.52 - - [02/Dec/2023:08:33:48 +0100] "GET /wp-login.php HTTP/1.1" 200 6081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
... show less
Brute-Force
Web App Attack
Anonymous
2023-12-02 04:19:41
(1 week ago)
Several scans for php scripts
Bad Web Bot
akcurate.de
2023-12-01 21:58:05
(1 week ago)
[Fri Dec 01 21:50:44.670274 2023] [authz_core:error] [pid 233626:tid 233670] [client 187.49.9.52:591 ... show more [Fri Dec 01 21:50:44.670274 2023] [authz_core:error] [pid 233626:tid 233670] [client 187.49.9.52:59152] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: http://akcurate.de/wp-login.php
[Fri Dec 01 21:50:45.729833 2023] [authz_core:error] [pid 149297:tid 149499] [client 187.49.9.52:59386] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Fri Dec 01 21:50:46.806951 2023] [authz_core:error] [pid 149297:tid 149439] [client 187.49.9.52:59584] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Fri Dec 01 22:58:03.598733 2023] [authz_core:error] [pid 149538:tid 149578] [client 187.49.9.52:44976] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: http://kirschmechanik.de/en/home/wp-login.php
... show less
Brute-Force
Web App Attack
Malta
2023-12-01 17:22:52
(1 week ago)
187.49.9.52 - - [01/Dec/2023:18:22:51 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu ... show more 187.49.9.52 - - [01/Dec/2023:18:22:51 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
Brute-force password attempt show less
Hacking
Brute-Force
Web App Attack
eminovic.ba
2023-12-01 06:33:13
(1 week ago)
Wordpress attack
...
Hacking
Brute-Force
Web App Attack
maxxsense
2023-12-01 04:47:29
(1 week ago)
(wordpress) Failed wordpress login from 187.49.9.52 (CL/Chile/server1.hostingcom.cl)
Brute-Force
mawan
2023-12-01 02:25:53
(1 week ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
HoneyPotEu
2023-12-01 01:35:50
(1 week ago)
187.49.9.52 [redacted] (272144-TELECOMUNICACIONES HOSTINGNET SpA Chile Santiago) - - [01/Dec/2023:02 ... show more 187.49.9.52 [redacted] (272144-TELECOMUNICACIONES HOSTINGNET SpA Chile Santiago) - - [01/Dec/2023:02:34:34 +0100] "GET /wp-login.php HTTP/1.1" 401 172 "http://[redacted]/wp-login.php" "Mozilla/5.0
... show less
Bad Web Bot
Web App Attack