๐ณ๐ฑ
BlueWire Hosting
2024-01-04 21:10:42
(2 years ago)
Probing for Wordpress vulnerabilities
Bad Web Bot
Web App Attack
๐ฉ๐ช
psauxit
2023-03-02 12:51:06
(3 years ago)
Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ฆ๐บ
MAGIC
2023-03-02 01:16:58
(3 years ago)
Distributed DDOS attempts for multiple sites
DDoS Attack
Bad Web Bot
๐ช๐ธ
10dencehispahard SL
2023-03-01 21:28:39
(3 years ago)
Unauthorized login attempts [{'apache-syn-flood'}]
Brute-Force
๐จ๐ฟ
plzenskypruvodce.cz
2023-02-01 21:04:33
(3 years ago)
[Wed Feb 01 22:04:28.283801 2023] [authz_core:error] [pid 1707784:tid 139735242614528] [client 195.1 ...
show more
[Wed Feb 01 22:04:28.283801 2023] [authz_core:error] [pid 1707784:tid 139735242614528] [client 195.133.40.74:49864] AH01630: client denied by server configuration: /var/www/buchtic.net/blog/wp-includes/css/css.php
[Wed Feb 01 22:04:32.619597 2023] [authz_core:error] [pid 1707784:tid 139735217436416] [client 195.133.40.74:63429] AH01630: client denied by server configuration: /var/www/buchtic.net/blog/wp-includes/fonts/css.php
...
show less
Web App Attack
๐บ๐ธ
mnsf
2023-01-31 22:07:13
(3 years ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
๐ง๐ช
taivas.nl
2023-01-30 22:02:02
(3 years ago)
Wordpress_Attack
Web App Attack
๐ฉ๐ช
rh24
2023-01-30 16:00:24
(3 years ago)
(mod_security) mod_security triggered on hostname [redacted] 195.133.40.74 (CZ/Czechia/-): (CF_ENAB ...
show more
(mod_security) mod_security triggered on hostname [redacted] 195.133.40.74 (CZ/Czechia/-): (CF_ENABLE)
show less
SQL Injection
๐จ๐ฟ
plzenskypruvodce.cz
2023-01-29 13:02:23
(3 years ago)
[Sun Jan 29 14:02:22.042866 2023] [authz_core:error] [pid 747270:tid 139735259399936] [client 195.13 ...
show more
[Sun Jan 29 14:02:22.042866 2023] [authz_core:error] [pid 747270:tid 139735259399936] [client 195.133.40.74:61100] AH01630: client denied by server configuration: /var/www/buchtic.net/blog/wp-includes/index.php, referer: www.google.com
[Sun Jan 29 14:02:22.044378 2023] [authz_core:error] [pid 747270:tid 139735259399936] [client 195.133.40.74:61100] AH01630: client denied by server configuration: /var/www/buchtic.net/blog/wp-includes/index.php, referer: www.google.com
...
show less
Web App Attack
๐บ๐ธ
Jae Cee
2023-01-21 09:45:35
(3 years ago)
Suspicious file - [FILES:file = a57bze8931.php /tmp/phpO9wl8W 525] Blocked file upload attempt (MIME ...
show more
Suspicious file - [FILES:file = a57bze8931.php /tmp/phpO9wl8W 525] Blocked file upload attempt (MIME-type mismatch) - [a57bze8931.php != text/html]
show less
Hacking
Web App Attack
Anonymous
2023-01-19 10:47:11
(3 years ago)
195.133.40.74 - - [18/Jan/2023:20:51:18 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/2.0" ...
show more
195.133.40.74 - - [18/Jan/2023:20:51:18 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/2.0" 444 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [18/Jan/2023:20:51:20 +0100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/2.0" 444 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [18/Jan/2023:20:51:28 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/2.0" 444 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [18/Jan/2023:20:51:32 +0100] "GET /wp-content/themes/seotheme/mar.php HTTP/2.0" 444 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bu
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2023-01-18 07:40:44
(3 years ago)
195.133.40.74 - - [11/Jan/2023:04:28:35 +0100] "GET /MT//RxR.php HTTP/2.0" 444 0 "-" "Mozlila/5.0 (L ...
show more
195.133.40.74 - - [11/Jan/2023:04:28:35 +0100] "GET /MT//RxR.php HTTP/2.0" 444 0 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [11/Jan/2023:04:28:37 +0100] "GET /mtos/mt-xmlrpc.cgi HTTP/2.0" 444 0 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [11/Jan/2023:04:28:40 +0100] "GET /mtos/mt-xmlrpc.cgi HTTP/2.0" 444 0 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [11/Jan/2023:04:28:43 +0100] "GET /mtos//RxR.php HTTP/2.0" 444 0 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.133.40.74 - - [11/Ja
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
gerensat
2023-01-16 09:25:33
(3 years ago)
2023-01-16 06:25:31 | / | [] | python-requests/2.27.1
Web App Attack
๐บ๐ธ
chronos
2023-01-16 01:17:15
(3 years ago)
[[15/01/2023 - 22:17:15 -03:00 UTC]
Attack from [Des Capital B.V.]
[195.133.40.74]-[RANGE:195.133.40 ...
show more
[[15/01/2023 - 22:17:15 -03:00 UTC]
Attack from [Des Capital B.V.]
[195.133.40.74]-[RANGE:195.133.40.0 - 195.133.43.255]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpM]
...
show less
Hacking
Web App Attack
Anonymous
2023-01-14 21:23:15
(3 years ago)
Configuration snooping (/.env):
195.133.40.74 - - [14/Jan/2023:21:23:15 +0000] "GET /.env HTTP/1.1" ...
show more
Configuration snooping (/.env):
195.133.40.74 - - [14/Jan/2023:21:23:15 +0000] "GET /.env HTTP/1.1" 200 234 "-" "python-requests/2.27.1"
show less
Hacking
Web App Attack