🇪🇸
10dencehispahard SL
2024-03-24 08:00:42
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇲🇾
Rizzy
2024-03-24 05:05:04
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
ps-center
2024-01-03 09:45:37
(2 years ago)
MYH: Web Attack GET //admin/controller/extension/wpm.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇳🇱
vestibtech
2024-01-02 10:47:11
(2 years ago)
191.101.41.248 - - [02/Jan/2024:03:47:10 -0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd. ...
show more
191.101.41.248 - - [02/Jan/2024:03:47:10 -0700] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/2.0" 404 4749 "http://tbi.equipment//modules/mod_simplefileuploadv1.3/elements/udd.php" "Go-http-client/2.0"
...
show less
Web App Attack
🇲🇾
Rizzy
2023-12-29 08:43:40
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
MAGIC
2023-12-28 06:08:40
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
uhlhosting
2023-12-27 15:45:58
(2 years ago)
www.atec-bb.ch 191.101.41.248 - - [27/Dec/2023:16:45:56.736071 +0100] "GET //wp-2019.php HTTP/1.1" 4 ...
show more
www.atec-bb.ch 191.101.41.248 - - [27/Dec/2023:16:45:56.736071 +0100] "GET //wp-2019.php HTTP/1.1" 403 199 "-" "-" ZYxGtA5hJ0t-78egNNzNXAAAAQA "-" /apache/20231227/20231227-1645/20231227-164556-ZYxGtA5hJ0t-78egNNzNXAAAAQA 0 1664 md5:e9a9f431769843bb431656f15d100c78
www.atec-bb.ch 191.101.41.248 - - [27/Dec/2023:16:45:57.072979 +0100] "GET //01.php HTTP/1.1" 403 199 "-" "-" ZYxGtQ5hJ0t-78egNNzNXwAAAQg "-" /apache/20231227/20231227-1645/20231227-164557-ZYxGtQ5hJ0t-78egNNzNXwAAAQg 0 1654 md5:435108d9b230973b69265f173c580afa
www.atec-bb.ch 191.101.41.248 - - [27/Dec/2023:16:45:57.513030 +0100] "GET //x.php HTTP/1.1" 403 199 "-" "-" ZYxGtQ5hJ0t-78egNNzNYQAAAQI "-" /apache/20231227/20231227-1645/20231227-164557-ZYxGtQ5hJ0t-78egNNzNYQAAAQI 0 1652 md5:269087b230beb17eeb21e87b27599300
www.atec-bb.ch 191.101.41.248 - - [27/Dec/2023:16:45:57.970847 +0100] "GET //wp_info.php HTTP/1.1" 403 199 "-" "-" ZYxGtQ5hJ0t-78egNNzNZQAAAQo "-" /apache/20231227/20231227-1645/20231227-164557-ZYxGtQ5hJ0t-78eg
...
show less
DDoS Attack
Brute-Force
🇮🇩
hermawan
2023-12-26 19:12:23
(2 years ago)
[Wed Dec 27 02:12:19.294066 2023] [security2:error] [pid 102485:tid 140527749011008] [client 191.101 ...
show more
[Wed Dec 27 02:12:19.294066 2023] [security2:error] [pid 102485:tid 140527749011008] [client 191.101.41.248:52303] [client 191.101.41.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Client" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "6"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Client found within REQUEST_HEADERS:User-Agent: Go-http-client/1.1 request_line = GET //wp-content/index.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/wp-content/index.php"] [unique_id "ZYslk95enpaYh0tOJLVTnAAAAGY"] [staklim-malang.info] [staklim-malang.info] top=[102569] [KsMadiYRSRo] [ZYslk95enpaYh0tOJLVTnAAAAGY] keep_alive=[0] [2023-12-27 02:12:19.294069] [R:ZYslk95enpaYh0tOJLVTnAAAAGY] UA:'Go-http-client/1.1' Host:'staklim-malang.info' Accept-Encoding:'gzip
...
show less
Hacking
Web App Attack
🇺🇸
mnsf
2023-12-26 18:05:53
(2 years ago)
Too many Status 40X (98)
Request Overload (102)
Brute-Force
Web App Attack
2023-12-26 00:43:44
(2 years ago)
Malicious activity detected
Bot disrespecting robots.txt
Bad Web Bot
🇩🇪
niceshops.com
2023-12-25 11:26:36
(2 years ago)
Web Attack ([25/Dec/2023:12:26:34.248] GET https://cdnll.niceshops.com//wp-content/up.php)
Web App Attack
2023-12-24 20:22:21
(2 years ago)
Attempted shell / backdoor access: /media-admin.php
Hacking
Bad Web Bot
2023-12-24 20:22:21
(2 years ago)
Attempted shell / backdoor access: /media-admin.php
Hacking
Bad Web Bot
🇩🇪
Dentax
2023-12-24 16:08:59
(2 years ago)
\[Sun Dec 24 16:57:40 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/autoload_classmap. ...
show more
\[Sun Dec 24 16:57:40 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/autoload_classmap.php' not found or unable to stat\[Sun Dec 24 16:57:42 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/radio.php' not found or unable to stat\[Sun Dec 24 16:57:42 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/payout.php' not found or unable to stat\[Sun Dec 24 16:57:43 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/lock360.php' not found or unable to stat\[Sun Dec 24 16:57:45 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/pi.php' not found or unable to stat\[Sun Dec 24 16:57:45 2023\] \[error\] \[client 191.101.41.248\] script '/var/www/wp-2019.php' not found or unable to stat
...
show less
Web Spam
Brute-Force
🇺🇸
lavnet.net
2023-12-24 03:29:27
(2 years ago)
[Sun Dec 24 03:29:19.845594 2023] [authz_core:error] [pid 2419120] [client 191.101.41.248:30765] AH0 ...
show more
[Sun Dec 24 03:29:19.845594 2023] [authz_core:error] [pid 2419120] [client 191.101.41.248:30765] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/wp_info.php, referer: http://seconcepts.com//wp_info.php
[Sun Dec 24 03:29:21.776624 2023] [authz_core:error] [pid 2419120] [client 191.101.41.248:30765] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/fw.php, referer: http://seconcepts.com//fw.php
[Sun Dec 24 03:29:26.794259 2023] [authz_core:error] [pid 2419120] [client 191.101.41.248:30765] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/xleet.php, referer: http://seconcepts.com//xleet.php
...
show less
Brute-Force