Anonymous
2025-01-10 17:57:03
(1 year ago)
wordpress-trap
Web App Attack
๐ฉ๐ช
LRob
2025-01-10 12:15:03
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2025-01-08 19:06:38
(1 year ago)
193.176.211.98 - - [08/Jan/2025:21:06:11 +0200] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 272 ...
show more
193.176.211.98 - - [08/Jan/2025:21:06:11 +0200] "GET /wp-content/upgrade/about.php HTTP/1.1" 404 272 "-" "Go-http-client/1.1"
193.176.211.98 - - [08/Jan/2025:21:06:38 +0200] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 404 272 "-" "Go-http-client/1.1"
...
show less
Web App Attack
Anonymous
2024-12-19 05:25:35
(1 year ago)
BruteForce IMAP/POP3
Brute-Force
๐ซ๐ท
tecnicorioja
2024-12-18 23:01:13
(1 year ago)
(Mod_security) [18/Dec/2024:15:38:51.673317
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
nfsec.pl
2024-12-18 22:41:05
(1 year ago)
193.176.211.98 - - [18/Dec/2024:23:29:59 +0100] "GET /wp-content/plugins/ultimate-member/readme.txt ...
show more
193.176.211.98 - - [18/Dec/2024:23:29:59 +0100] "GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1" 404 31512 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.3 Safari/605.1.15"
193.176.211.98 - - [18/Dec/2024:23:33:13 +0100] "POST /business-directory/?dosrch=1&q&wpbdp_view=search&listingfields[+or+sleep(if(1%3d1,6,0))+))--+-][1] HTTP/1.1" 404 31850 "-" "Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
193.176.211.98 - - [18/Dec/2024:23:39:35 +0100] "GET /wp-config.txt HTTP/1.1" 404 31746 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
193.176.211.98 - - [18/Dec/2024:23:39:50 +0100] "POST /wp-content/plugins/simple-file-list/ee-upload-engine.php HTTP/1.1" 404 31597 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.7.15"
193.176.211.98 - - [
...
show less
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-18 14:33:35
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.176.211.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.176.211.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 09:33:25.312080 2024] [security2:error] [pid 10402:tid 10402] [client 193.176.211.98:19945] [client 193.176.211.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dvdmasters.com"] [uri "/wp-config.php.dist"] [unique_id "Z2LdNcHIQJ0iAxWFLCnDxAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
mxinfra
2024-12-17 12:00:10
(1 year ago)
Blocked by Fail2Ban (plesk-modsecurity)
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
london2038.com
2024-12-16 01:37:36
(1 year ago)
Attacking WordPress
193.176.211.98 - - [16/Dec/2024:02:37:31 +0100] "POST /wp-admin/admin-ajax.php H ...
show more
Attacking WordPress
193.176.211.98 - - [16/Dec/2024:02:37:31 +0100] "POST /wp-admin/admin-ajax.php HTTP/1.1" 422 0 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
Anonymous
2024-12-15 20:50:04
(1 year ago)
| SQL injection attempt.
Hacking
SQL Injection
Web App Attack
๐ฉ๐ช
psauxit
2024-12-15 06:54:31
(1 year ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
๐บ๐ธ
RLDD
2024-12-13 21:01:37
(1 year ago)
WP probing -nov
Web App Attack
๐บ๐ธ
octageeks.com
2024-12-12 05:07:43
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐ฉ๐ช
Ba-Yu
2024-12-12 01:30:33
(1 year ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2024-12-11 08:21:18
(1 year ago)
193.176.211.98 - - [11/Dec/2024:10:20:12 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 280 "-" "Go ...
show more
193.176.211.98 - - [11/Dec/2024:10:20:12 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 280 "-" "Go-http-client/1.1"
193.176.211.98 - - [11/Dec/2024:10:21:17 +0200] "GET /wp-admin/css/index.php HTTP/1.1" 404 280 "-" "Go-http-client/1.1"
...
show less
Web App Attack