π©πͺ
ps-center
2023-02-01 17:39:50
(3 years ago)
C1: Web Attack GET /wp-includes/wlwmanifest.xml
Web Spam
Hacking
Bad Web Bot
Web App Attack
π©πͺ
xyz.rip
2023-02-01 12:55:08
(3 years ago)
WAF Violation...
Hacking
Web App Attack
Anonymous
2023-02-01 12:37:54
(3 years ago)
spamd: identified spam
Email Spam
π©πͺ
xwng
2023-02-01 12:06:58
(3 years ago)
[Wed Feb 01 13:06:58.085152 2023] [access_compat:error] [pid 7155] [client 195.3.222.56:58176] AH017 ...
show more
[Wed Feb 01 13:06:58.085152 2023] [access_compat:error] [pid 7155] [client 195.3.222.56:58176] AH01797: client denied by server configuration: /var/www/html/
[Wed Feb 01 13:06:58.213806 2023] [access_compat:error] [pid 7155] [client 195.3.222.56:58176] AH01797: client denied by server configuration: /var/www/html/
[Wed Feb 01 13:06:58.283038 2023] [access_compat:error] [pid 7155] [client 195.3.222.56:58176] AH01797: client denied by server configuration: /var/www/html/wp-includes
...
show less
Hacking
Brute-Force
π©πͺ
Linux-Tech
2023-02-01 11:54:28
(3 years ago)
195.3.222.56 - - [01/Feb/2023:12:53:25 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 162 "- ...
show more
195.3.222.56 - - [01/Feb/2023:12:53:25 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 195.3.222.56 - - [01/Feb/2023:12:54:28 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Port Scan
Bad Web Bot
Web App Attack
π©πͺ
niceshops.com
2023-02-01 11:46:33
(3 years ago)
Web Attack ([01/Feb/2023:12:46:29.514] GET //wp-includes/wlwmanifest.xml)
Web App Attack
π©πͺ
twx
2023-02-01 11:14:10
(3 years ago)
fail2ban/195.3.222.56 - - [01/Feb/2023:12:14:02 +0100] "POST //wp-login.php HTTP/1.0" 200 12914 "htt ...
show more
fail2ban/195.3.222.56 - - [01/Feb/2023:12:14:02 +0100] "POST //wp-login.php HTTP/1.0" 200 12914 "https://85.214.45.150//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.3.222.56 - - [01/Feb/2023:12:14:04 +0100] "POST //wp-login.php HTTP/1.0" 200 12914 "https://85.214.45.150//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
195.3.222.56 - - [01/Feb/2023:12:14:06 +0100] "POST //wp-login.php HTTP/1.0" 200 12914 "https://85.214.45.150//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Brute-Force
Web App Attack
Anonymous
2023-02-01 10:39:47
(3 years ago)
DNS Compromise
DDoS Attack
Anonymous
2023-02-01 07:47:14
(3 years ago)
HTTP_USER_AGENT Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTM ...
show more
HTTP_USER_AGENT Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36
show less
Port Scan
π©πͺ
SCHAPPY
2023-02-01 03:51:58
(3 years ago)
Mutliple attempts to access web resources unauthorized, HTTP code 403.
Web App Attack
π©πͺ
mxinfra
2023-02-01 02:55:41
(3 years ago)
Fail2Ban triggered by plesk-modsecurity Wed 01 Feb 2023 03:55:41 AM CET
Hacking
Brute-Force
Web App Attack
π©πͺ
niceshops.com
2023-01-31 23:26:18
(3 years ago)
Web Attack ([01/Feb/2023:00:26:17.159] GET /.env)
Web App Attack
π©πͺ
Stefan Dreher
2023-01-31 23:08:20
(3 years ago)
195.3.222.56 - - [01/Feb/2023:00:08:19 +0100] "GET /.env HTTP/1.1" 404 188 "-" "Mozlila/5.0 (Linux; ...
show more
195.3.222.56 - - [01/Feb/2023:00:08:19 +0100] "GET /.env HTTP/1.1" 404 188 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.3.222.56 - - [01/Feb/2023:00:08:20 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 188 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.3.222.56 - - [01/Feb/2023:00:08:20 +0100] "GET /phpinfo.php HTTP/1.1" 404 188 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.3.222.56 - - [01/Feb/2023:00:08:20 +0100] "GET /info.php HTTP/1.1" 404 188 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
195.3.222.56 - - [01/Feb/2023:00:08:20 +0100] "GET /aws.yml HTTP
show less
Hacking
Brute-Force
π©πͺ
reger-men
2023-01-31 18:59:29
(3 years ago)
IP & Port Scan.
Port Scan
Brute-Force
SSH
π©πͺ
sebaro11
2023-01-31 18:55:31
(3 years ago)
Portscan on 443/TCP blocked by UFW
Port Scan