🇺🇸
nowyouknow
2024-10-28 16:28:04
(1 year ago)
(From [email protected] ) Hi there,
I noticed your website, and wanted to introduce m ...
show more
(From [email protected] ) Hi there,
I noticed your website, and wanted to introduce myself. I specialize in high-tier PR that will get your company featured on exclusive news sites like Digital Journal and 300+ more in under 30 days, giving your business an immediate boost in credibility and visibility in client's eyes.
My chat link is below if you have a minute for me to tell you how it works.
https://hi.switchy.io/press-release
show less
Phishing
Web Spam
🇪🇸
10dencehispahard SL
2024-03-24 03:04:18
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇺🇸
TPI-Abuse
2024-02-15 15:06:22
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 191.101.41.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 191.101.41.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 15 10:06:15.820040 2024] [security2:error] [pid 11078] [client 191.101.41.65:31743] [client 191.101.41.65] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.inclined2wander.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.inclined2wander.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zc4oZ9D1RRjYYiOaZ3ABwQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2024-01-03 09:37:36
(2 years ago)
MYH: Web Attack GET //shell.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2023-12-30 11:53:36
(2 years ago)
"GET //xleet.php HTTP/1.1" 404
"GET //wp-content/plugins/masterx/wpx.php HTTP/1.1" 404
"GET //xml.ph ...
show more
"GET //xleet.php HTTP/1.1" 404
"GET //wp-content/plugins/masterx/wpx.php HTTP/1.1" 404
"GET //xml.php HTTP/1.1" 404
"GET //wp-admin/includes/about.php HTTP/1.1" 404
"GET //403.php HTTP/1.1" 404
"GET //by.php HTTP/1.1" 404
"GET //css.php HTTP/1.1" 404
"GET //wp-content/plugins/instabuilder2/cache/plugins/moon.php HTTP/1.1" 404
"GET //uploads/wp-blog.php HTTP/1.1" 404
"GET //wp-content/plugins/Cache/dropdown.php HTTP/1.1" 404
"GET //moon.php HTTP/1.1" 404
"GET //wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php HTTP/1.1" 404
"GET //wp-content/shell20211028.php HTTP/1.1" 404
show less
Web App Attack
🇫🇷
uhlhosting
2023-12-27 15:46:01
(2 years ago)
www.atec-bb.ch 191.101.41.65 - - [27/Dec/2023:16:45:59.313303 +0100] "GET //wp-content/upload.php HT ...
show more
www.atec-bb.ch 191.101.41.65 - - [27/Dec/2023:16:45:59.313303 +0100] "GET //wp-content/upload.php HTTP/1.1" 403 199 "-" "-" ZYxGtwH8iBAa-mc9Ne-NqgAAAEo "-" /apache/20231227/20231227-1645/20231227-164559-ZYxGtwH8iBAa-mc9Ne-NqgAAAEo 0 1681 md5:674c02f9e8f71f03cb71dec0865523ce
www.atec-bb.ch 191.101.41.65 - - [27/Dec/2023:16:45:59.662084 +0100] "GET //xleet.php HTTP/1.1" 403 199 "-" "-" ZYxGtwH8iBAa-mc9Ne-NrAAAAEA "-" /apache/20231227/20231227-1645/20231227-164559-ZYxGtwH8iBAa-mc9Ne-NrAAAAEA 0 1657 md5:fec324b1c1039633a671c1f89a2050f2
www.atec-bb.ch 191.101.41.65 - - [27/Dec/2023:16:46:00.144426 +0100] "GET //wp-content/plugins/masterx/wpx.php HTTP/1.1" 403 199 "-" "-" ZYxGuAH8iBAa-mc9Ne-NrgAAAFE "-" /apache/20231227/20231227-1646/20231227-164600-ZYxGuAH8iBAa-mc9Ne-NrgAAAFE 0 1708 md5:bf604a632be249db3b51c4ceaafad5c7
www.atec-bb.ch 191.101.41.65 - - [27/Dec/2023:16:46:00.489174 +0100] "GET //xml.php HTTP/1.1" 403 199 "-" "-" ZYxGuAH8iBAa-mc9Ne-NrwAAAEQ "-" /apache/20231227/20231227-164
...
show less
DDoS Attack
Brute-Force
🇮🇩
hermawan
2023-12-26 19:13:36
(2 years ago)
[Wed Dec 27 02:13:32.401227 2023] [security2:error] [pid 102655:tid 140525038442048] [client 191.101 ...
show more
[Wed Dec 27 02:13:32.401227 2023] [security2:error] [pid 102655:tid 140525038442048] [client 191.101.41.65:5695] [client 191.101.41.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "Client" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-3.3.5/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "6"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: Client found within REQUEST_HEADERS:User-Agent: Go-http-client/1.1 request_line = GET //small.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-malang.info"] [uri "/small.php"] [unique_id "ZYsl3MdsJlwYCKM91MoJmwAAAPI"] [staklim-malang.info] [staklim-malang.info] top=[102779] [Ykp2ek4kQhY] [ZYsl3MdsJlwYCKM91MoJmwAAAPI] keep_alive=[0] [2023-12-27 02:13:32.401231] [R:ZYsl3MdsJlwYCKM91MoJmwAAAPI] UA:'Go-http-client/1.1' Host:'staklim-malang.info' Accept-Encoding:'gzip
...
show less
Hacking
Web App Attack
🇩🇪
ghostwarriors
2023-12-25 10:20:19
(2 years ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
SCHAPPY
2023-12-25 09:35:36
(2 years ago)
Probing for non-installed web apps or current vulnerabilities.
Hacking
Web App Attack
🇦🇺
Bay13
2023-12-24 09:28:43
(2 years ago)
f2b http-redirect
Hacking
Web App Attack
🇺🇸
lavnet.net
2023-12-24 03:29:10
(2 years ago)
[Sun Dec 24 03:29:05.511444 2023] [authz_core:error] [pid 2419198] [client 191.101.41.65:42201] AH01 ...
show more
[Sun Dec 24 03:29:05.511444 2023] [authz_core:error] [pid 2419198] [client 191.101.41.65:42201] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/lock360.php, referer: http://seconcepts.com//lock360.php
[Sun Dec 24 03:29:07.088444 2023] [authz_core:error] [pid 2419198] [client 191.101.41.65:42201] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/pi.php, referer: http://seconcepts.com//pi.php
[Sun Dec 24 03:29:09.640137 2023] [authz_core:error] [pid 2419198] [client 191.101.41.65:42201] AH01630: client denied by server configuration: /var/www/seconcepts.com/web/wp-2019.php, referer: http://seconcepts.com//wp-2019.php
...
show less
Brute-Force
🇺🇸
mnsf
2023-12-23 23:09:25
(2 years ago)
Too many Status 40X (97)
Request Overload (101)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 13:05:42
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 191.101.41.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 191.101.41.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 18 08:05:37.127954 2023] [security2:error] [pid 1998] [client 191.101.41.65:7333] [client 191.101.41.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "articlegenerator.net"] [uri "/core/.env"] [unique_id "ZYBDodYQ9mZqL-bWESccDwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-03-29 15:16:39
(3 years ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇧🇷
AC - Team
2023-03-12 10:15:06
(3 years ago)
191.101.41.65 - - [12/Mar/2023:07:15:04 -0300] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5 ...
show more
191.101.41.65 - - [12/Mar/2023:07:15:04 -0300] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Hacking
Web App Attack