๐ฉ๐ช
mxinfra
2023-05-13 11:24:50
(3 years ago)
Fail2Ban triggered by apache-auth Sat 13 May 2023 01:24:49 PM CEST
Hacking
Brute-Force
Web App Attack
Anonymous
2023-01-28 08:36:49
(3 years ago)
WordPress attacks
Hacking
Web App Attack
๐ฎ๐น
Rebel_Leila
2023-01-24 14:40:50
(3 years ago)
Searching for vulnerabilities
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
expandmade.com
2023-01-21 11:39:35
(3 years ago)
trolling for installation vulnerabilities [21/Jan/2023:11:39:35 "GET /wp-reset.php"]
Web App Attack
Anonymous
2023-01-21 10:17:40
(3 years ago)
Malicious activity detected
Hacking
Brute-Force
๐ฉ๐ช
ut-addicted.com
2023-01-17 11:17:30
(3 years ago)
\[Tue Jan 17 12:17:28.220371 2023\] \[:error\] \[pid 24507:tid 140181357197056\] \[client 50.62.30.2 ...
show more
\[Tue Jan 17 12:17:28.220371 2023\] \[:error\] \[pid 24507:tid 140181357197056\] \[client 50.62.30.223:38102\] \[client 50.62.30.223\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 15\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/wp-admin/admin-ajax.php"\] \[unique_id "Y8aDyKRWsWoAI1rSPgs1AQAAAMA"\]
show less
Brute-Force
Web App Attack
๐ฉ๐ช
SCHAPPY
2023-01-17 06:39:29
(3 years ago)
Critical web app attack detected. Path Traversal Attack (/../)
Web App Attack
๐ง๐ท
AC - Team
2023-01-16 21:54:58
(3 years ago)
50.62.30.223 - - [16/Jan/2023:18:55:10 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_im ...
show more
50.62.30.223 - - [16/Jan/2023:18:55:10 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 400 3679 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ง๐ท
AC - Team
2023-01-16 19:07:13
(3 years ago)
50.62.30.223 - - [16/Jan/2023:16:07:10 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_im ...
show more
50.62.30.223 - - [16/Jan/2023:16:07:10 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 500 3839 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ง๐ท
AC - Team
2023-01-16 18:46:13
(3 years ago)
50.62.30.223 - - [16/Jan/2023:15:46:08 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_im ...
show more
50.62.30.223 - - [16/Jan/2023:15:46:08 -0300] "GET /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php HTTP/1.1" 400 5116 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
...
show less
Hacking
Web App Attack
๐บ๐ธ
M Bradley
2023-01-16 16:13:28
(3 years ago)
Web scan/attack
Hacking
Web App Attack
๐ธ๐ฌ
Samuel K
2023-01-14 00:00:05
(3 years ago)
Web scan/attack
Port Scan
Web App Attack
๐ณ๐ฑ
0xffffffff
2023-01-13 08:00:24
(3 years ago)
[2023-01-13 10:00:20.799592] [authz_core:error] [pid 1143618:tid 140656137020992] [client 50.62.30.2 ...
show more
[2023-01-13 10:00:20.799592] [authz_core:error] [pid 1143618:tid 140656137020992] [client 50.62.30.223:0] AH01630: client denied by server configuration: /home*public_html/wp-content/plugins/core-stab , error_notes:wp-exploit:subdir-php , URI:'/wp-content/plugins/core-stab/index.php'
[2023-01-13 10:00:21.438588] [authz_core:error] [pid 1143619:tid 140656304875072] [client 50.62.30.223:0] AH01630: client denied by server configuration: /home*public_html/wp-admin/wp-admin.php , error_notes:non-existing-php , URI:'/wp-admin/wp-admin.php'
[2023-01-13 10:00:21.951901] [authz_core:error] [pid 1143618:tid 140656137020992] [client 50.62.30.223:0] AH01630: client denied by server configuration: /home*public_html/wp-admin.php , error_notes:non-existing-php , URI:'/wp-admin.php'
[2023-01-13 10:00:22.467806] [authz_core:error] [pid 1143618:tid 140656137020992] [client 50.62.30.223:0] AH01630: client denied by server configuration: /home*public_html/wp-content/wp-content.php , error_notes:non-existing-php , URI:'/wp-conte
show less
Bad Web Bot
Web App Attack
Anonymous
2023-01-12 16:46:37
(3 years ago)
Malicious activity detected
Hacking
Brute-Force
Anonymous
2023-01-12 11:10:38
(3 years ago)
50.62.30.223 - - [12/Jan/2023:12:10:36 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 401 5474 "-" "Mo ...
show more
50.62.30.223 - - [12/Jan/2023:12:10:36 +0100] "GET /wp-admin/wp-admin.php HTTP/1.1" 401 5474 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
50.62.30.223 - - [12/Jan/2023:12:10:37 +0100] "GET /wp-admin.php HTTP/1.1" 401 5474 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
50.62.30.223 - - [12/Jan/2023:12:10:37 +0100] "GET /wp-content/wp-content.php HTTP/1.1" 404 5229 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36"
...
show less
Web App Attack