๐น๐ผ
tyetriiix
2026-06-15 13:28:17
(3 days ago)
Wazuh Alert Evidence: 34.6.220.80 - - [15/Jun/2026:13:28:14 +0000] "GET /wp-json/gravitysmtp/v1/test ...
show more
Wazuh Alert Evidence: 34.6.220.80 - - [15/Jun/2026:13:28:14 +0000] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 8.0.0; LDN-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ซ๐ฎ
23p02732
2026-06-15 11:46:43
(3 days ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
4server
2026-06-15 05:15:02
(3 days ago)
[MonJun1507:14:55.9087722026][security2:error][pid3788818:tid3788886][client34.6.220.80:0]ModSecurit ...
show more
[MonJun1507:14:55.9087722026][security2:error][pid3788818:tid3788886][client34.6.220.80:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"fondazionepetronillapontirone.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"ai-KT7QIlTpZI9ViNxFyagAAAEY\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-06-15 04:53:02
(3 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฉ๐ช
Dominik Lysiak
2026-06-15 04:14:12
(3 days ago)
34.6.220.80 - - [15/Jun/2026:06:14:11 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 444 0 " ...
show more
34.6.220.80 - - [15/Jun/2026:06:14:11 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
34.6.220.80 - - [15/Jun/2026:06:14:11 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.4 Safari/537.36"
34.6.220.80 - - [15/Jun/2026:06:14:11 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
mnsf
2026-06-15 02:06:43
(3 days ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
๐บ๐ธ
OceanTreasure
2026-06-14 21:20:04
(4 days ago)
tcp/80; WordPress REST API /wp-json/ probe (R18): "GET /wp-json/gravitysmtp/v1/settings" @ 2026-06-1 ...
show more
tcp/80; WordPress REST API /wp-json/ probe (R18): "GET /wp-json/gravitysmtp/v1/settings" @ 2026-06-14T21:19:18Z
show less
Brute-Force
๐บ๐ธ
etu brutus
2026-06-14 13:43:49
(4 days ago)
34.6.220.80 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
MBombeck
2026-06-14 13:43:02
(4 days ago)
Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-06-14 13:20:57
(4 days ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-7)
Hacking
Bad Web Bot
๐ช๐ธ
Francisco Vallejo
2026-06-14 12:34:05
(4 days ago)
[Sun Jun 14 14:34:04.822468 2026] [core:info] [pid 4183296:tid 130566041093824] [client 34.6.220.80: ...
show more
[Sun Jun 14 14:34:04.822468 2026] [core:info] [pid 4183296:tid 130566041093824] [client 34.6.220.80:47504] AH00128: File does not exist: /var/www/franvallejo/wp-json/gravitysmtp/v1/tests/mock-data
[Sun Jun 14 14:34:04.837557 2026] [core:info] [pid 6953:tid 130566586357440] [client 34.6.220.80:47506] AH00128: File does not exist: /var/www/franvallejo/wp-json/gravitysmtp/v1/settings
[Sun Jun 14 14:34:04.871096 2026] [core:info] [pid 6953:tid 130566594750144] [client 34.6.220.80:47524] AH00128: File does not exist: /var/www/franvallejo/wp-json/gravitysmtp/v1/tests/mock-data
[Sun Jun 14 14:34:04.871738 2026] [core:info] [pid 4183296:tid 130567444092608] [client 34.6.220.80:47516] AH00128: File does not exist: /var/www/franvallejo/wp-json/gravitysmtp/v1/config
[Sun Jun 14 14:34:04.877103 2026] [core:info] [pid 4183296:tid 130567140013760] [client 34.6.220.80:47526] AH00128: File does not exist: /var/www/franvallejo/wp-json/wp/v2/settings
...
show less
Brute-Force
SSH
๐ฌ๐ง
consul.to
2026-06-14 07:10:59
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
VHosting
2026-06-14 02:45:03
(4 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack