🇦🇺
GE
2025-12-20 23:58:57
(7 months ago)
...
Port Scan
🇩🇪
Egon Bart
2024-01-09 10:00:00
(2 years ago)
Cisco ASA SSL VPN bruteforcing/exploting
DDoS Attack
FTP Brute-Force
VPN IP
Port Scan
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
psauxit
2023-12-12 13:18:23
(2 years ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Hacking
Web App Attack
🇬🇧
Swiptly
2023-12-11 12:04:41
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
2023-12-11 08:14:11
(2 years ago)
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:09 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 ...
show more
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:09 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:13 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
show less
Web App Attack
🇨🇭
unifr
2023-12-11 03:42:21
(2 years ago)
Unauthorized IMAP connection attempt
Brute-Force
🇧🇪
holos.pt
2023-12-05 14:00:07
(2 years ago)
Blocked for Directory Traversal (Requesting wp-config.php) in query string: php://filter/read=conver ...
show more
Blocked for Directory Traversal (Requesting wp-config.php) in query string: php://filter/read=convert.base64-encode/resource=../../../../wp-config.php
show less
Web App Attack
🇺🇸
TPI-Abuse
2023-12-05 08:24:38
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 92.118.39.226 (edc71.daten-de.com): 1 in the la ...
show more
(mod_security) mod_security (id:210730) triggered by 92.118.39.226 (edc71.daten-de.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 05 03:24:33.242112 2023] [security2:error] [pid 27278:tid 47005963441920] [client 92.118.39.226:50678] [client 92.118.39.226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||freshviewevents.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "freshviewevents.com"] [uri "/2022-reshviewevents.sql"] [unique_id "ZW7eQTMoAv3cm0Z81GOgsQAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-12-04 22:23:14
(2 years ago)
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:09 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 ...
show more
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:09 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
ft-1848-fussball.de 92.118.39.226 [04/Dec/2023:23:23:13 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134"
show less
Web App Attack
🇩🇪
Beta
2023-12-04 04:27:22
(2 years ago)
access non open port: 23
Port Scan
🇧🇪
holos.pt
2023-12-04 04:00:07
(2 years ago)
Blocked for Directory Traversal (Requesting wp-config.php) in query string: php://filter/read=conver ...
show more
Blocked for Directory Traversal (Requesting wp-config.php) in query string: php://filter/read=convert.base64-encode/resource=../../../wp-config.php
show less
Web App Attack
2023-12-01 12:09:29
(2 years ago)
apache-wordpress-login
Brute-Force
Web App Attack
🇺🇸
lavnet.net
2023-12-01 06:38:24
(2 years ago)
Dec 1 06:38:24 angela wordpress(thejunkymonkey.com)[1117250]: Authentication attempt for unknown us ...
show more
Dec 1 06:38:24 angela wordpress(thejunkymonkey.com)[1117250]: Authentication attempt for unknown user angie1stl from 92.118.39.226
...
show less
Hacking
Web App Attack
🇫🇷
Kenshin869
2023-11-30 05:17:20
(2 years ago)
Wordpress unauthorized access attempt
Brute-Force
🇺🇸
TPI-Abuse
2023-11-28 02:53:48
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 92.118.39.226 (edc71.daten-de.com): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 92.118.39.226 (edc71.daten-de.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 27 21:53:40.364938 2023] [security2:error] [pid 7741] [client 92.118.39.226:42340] [client 92.118.39.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quicksmogsandiego.com"] [uri "/wp-content/plugins/thecartpress/modules/Miranda.class.php"] [unique_id "ZWVWNM5i6_ZtDCfNLBCPTwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack