๐จ๐ณ
36.25.21.38
11 May 2025
36.25.21.38 - - [11/May/2025:12:26:11 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto ...
show more
36.25.21.38 - - [11/May/2025:12:26:11 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
36.25.21.38 - - [11/May/2025:12:26:13 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
36.25.21.38 - - [11/May/2025:12:26:14 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ท๐บ
87.251.78.20
11 May 2025
87.251.78.20 - - [11/May/2025:11:21:30 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+aut ...
show more
87.251.78.20 - - [11/May/2025:11:21:30 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
87.251.78.20 - - [11/May/2025:11:21:30 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
87.251.78.20 - - [11/May/2025:11:21:30 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ณ๐ฑ
51.15.9.50
08 May 2025
51.15.9.50 - - [08/May/2025:16:16:26 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "-" UA "Mozi ...
show more
51.15.9.50 - - [08/May/2025:16:16:26 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "-" UA "Mozilla/5.0 (compatible; SeoLyt/1.0; +https://seolyt.com)" gz% "-"
51.15.9.50 - - [08/May/2025:16:16:29 +0200] "HEAD /it HTTP/1.1" 405 HOST "salonia.it" REF "-" UA "Mozilla/5.0 (compatible; SeoLyt/1.0; +https://seolyt.com)" gz% "-"
51.15.9.50 - - [08/May/2025:16:16:32 +0200] "HEAD /en HTTP/1.1" 405 HOST "salonia.it" REF "-" UA "Mozilla/5.0 (compatible; SeoLyt/1.0; +https://seolyt.com)" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ญ๐ฐ
185.242.233.188
08 May 2025
185.242.233.188 - - [08/May/2025:05:55:38 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+ ...
show more
185.242.233.188 - - [08/May/2025:05:55:38 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
185.242.233.188 - - [08/May/2025:05:55:38 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
185.242.233.188 - - [08/May/2025:05:55:38 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "Custom-AsyncHttpClient" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐น๐ท
94.26.90.191
06 May 2025
94.26.90.191 - - [06/May/2025:11:51:21 +0200] "GET /root/.aws/credentials HTTP/1.1" 403 HOST "d.salo ...
show more
94.26.90.191 - - [06/May/2025:11:51:21 +0200] "GET /root/.aws/credentials HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0" gz% "-"
94.26.90.191 - - [06/May/2025:11:51:24 +0200] "GET /home/superset/.superset/superset_config.py HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0" gz% "-"
94.26.90.191 - - [06/May/2025:11:51:27 +0200] "GET /root/.aws/credentials HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
45.32.202.233
30 Apr 2025
45.32.202.233 - - [30/Apr/2025:20:42:46 +0200] "GET /mbilling/lib/icepay/icepay.php?democ=iamhacked; ...
show more
45.32.202.233 - - [30/Apr/2025:20:42:46 +0200] "GET /mbilling/lib/icepay/icepay.php?democ=iamhacked;id HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
45.32.202.233 - - [30/Apr/2025:20:42:47 +0200] "GET /mbilling/lib/icepay/icepay.php?democ=;id HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
45.32.202.233 - - [30/Apr/2025:20:42:48 +0200] "GET /mbilling/lib/icepay/icepay.php?democ=test;id HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ฌ๐ง
185.218.84.167
29 Apr 2025
Apr 29 21:29:25 localhost sshd-session[20135]: banner exchange: Connection from 185.218.84.167 port ...
show more
Apr 29 21:29:25 localhost sshd-session[20135]: banner exchange: Connection from 185.218.84.167 port 8450: invalid format
Apr 29 21:29:28 localhost sshd-session[20136]: banner exchange: Connection from 185.218.84.167 port 8458: invalid format
Apr 29 21:29:28 localhost sshd-session[20139]: banner exchange: Connection from 185.218.84.167 port 8464: invalid format
...
show less
Brute-Force
SSH
๐ท๐บ
5.255.255.77
29 Apr 2025
Apr 29 13:20:39 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 29 13:20:39 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=5.255.255.77 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=52337 PROTO=TCP SPT=443 DPT=56298 WINDOW=166 RES=0x00 ACK URGP=0
Apr 29 13:20:49 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=5.255.255.77 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=52338 PROTO=TCP SPT=443 DPT=56298 WINDOW=166 RES=0x00 ACK URGP=0
Apr 29 13:21:00 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=5.255.255.77 DST=192.168.1.88 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=52339 PROTO=TCP SPT=443 DPT=56298 WINDOW=166 RES=0x00 ACK URGP=0
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
3.73.239.57
29 Apr 2025
Apr 29 13:20:11 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 29 13:20:11 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=3.73.239.57 DST=192.168.1.88 LEN=80 TOS=0x00 PREC=0x00 TTL=54 ID=27691 DF PROTO=TCP SPT=80 DPT=40480 WINDOW=442 RES=0x00 ACK PSH URGP=0
Apr 29 13:20:11 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=3.73.239.57 DST=192.168.1.88 LEN=80 TOS=0x00 PREC=0x00 TTL=54 ID=27692 DF PROTO=TCP SPT=80 DPT=40480 WINDOW=442 RES=0x00 ACK PSH URGP=0
Apr 29 13:20:12 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=3.73.239.57 DST=192.168.1.88 LEN=80 TOS=0x00 PREC=0x00 TTL=54 ID=27693 DF PROTO=TCP SPT=80 DPT=40480 WINDOW=442 RES=0x00 ACK PSH URGP=0
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
139.59.143.102
29 Apr 2025
139.59.143.102 - - [29/Apr/2025:09:58:22 +0200] "GET / HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA ...
show more
139.59.143.102 - - [29/Apr/2025:09:58:22 +0200] "GET / HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "-" gz% "-"
139.59.143.102 - - [29/Apr/2025:09:58:25 +0200] "GET /.vscode/sftp.json HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "Go-http-client/1.1" gz% "-"
139.59.143.102 - - [29/Apr/2025:09:58:27 +0200] "GET /.DS_Store HTTP/1.1" 403 HOST "d.salonia.it" REF "-" UA "Go-http-client/1.1" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
18.206.15.46
24 Apr 2025
18.206.15.46 - - [24/Apr/2025:15:16:34 +0200] "GET /favicon.png HTTP/1.1" 403 HOST "salonia.it" REF ...
show more
18.206.15.46 - - [24/Apr/2025:15:16:34 +0200] "GET /favicon.png HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
18.206.15.46 - - [24/Apr/2025:15:16:37 +0200] "GET /favicon.png HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
18.206.15.46 - - [24/Apr/2025:15:16:40 +0200] "GET /favicon.png HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "python-requests/2.32.3" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ณ๐ฑ
204.137.14.68
24 Apr 2025
204.137.14.68 - - [24/Apr/2025:12:16:29 +0200] "GET /searxng/search?q=%21wp%20paris HTTP/1.1" 429 HO ...
show more
204.137.14.68 - - [24/Apr/2025:12:16:29 +0200] "GET /searxng/search?q=%21wp%20paris HTTP/1.1" 429 HOST "s.salonia.it" REF "-" UA "Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/132.0.6834.100 Mobile/15E148 Safari/604.1" gz% "-"
204.137.14.68 - - [24/Apr/2025:12:16:29 +0200] "GET /searxng/search?q=%21wikipedia%20paris HTTP/1.1" 429 HOST "s.salonia.it" REF "-" UA "Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/132.0.6834.100 Mobile/15E148 Safari/604.1" gz% "-"
204.137.14.68 - - [24/Apr/2025:12:16:29 +0200] "GET /searxng/search?q=%21map%20paris HTTP/1.1" 429 HOST "s.salonia.it" REF "-" UA "Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/132.0.6834.100 Mobile/15E148 Safari/604.1" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ฎ๐ณ
65.0.133.65
24 Apr 2025
65.0.133.65 - - [24/Apr/2025:05:42:44 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "h ...
show more
65.0.133.65 - - [24/Apr/2025:05:42:44 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
65.0.133.65 - - [24/Apr/2025:05:42:44 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
65.0.133.65 - - [24/Apr/2025:05:42:45 +0200] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
3.21.236.40
22 Apr 2025
Apr 22 07:36:27 localhost sshd-session[12113]: banner exchange: Connection from 3.21.236.40 port 584 ...
show more
Apr 22 07:36:27 localhost sshd-session[12113]: banner exchange: Connection from 3.21.236.40 port 58466: invalid format
Apr 22 07:37:49 localhost sshd-session[12164]: banner exchange: Connection from 3.21.236.40 port 40548: invalid format
Apr 22 07:39:19 localhost sshd-session[12205]: banner exchange: Connection from 3.21.236.40 port 47558: invalid format
...
show less
Brute-Force
SSH
๐ฎ๐ณ
15.206.92.78
21 Apr 2025
15.206.92.78 - - [21/Apr/2025:21:18:21 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF " ...
show more
15.206.92.78 - - [21/Apr/2025:21:18:21 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
15.206.92.78 - - [21/Apr/2025:21:18:22 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
15.206.92.78 - - [21/Apr/2025:21:18:22 +0200] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ธ๐ฌ
140.245.50.20
20 Apr 2025
140.245.50.20 - - [20/Apr/2025:21:11:23 +0200] "GET /.env HTTP/1.1" 403 HOST "s.salonia.it" REF "-" ...
show more
140.245.50.20 - - [20/Apr/2025:21:11:23 +0200] "GET /.env HTTP/1.1" 403 HOST "s.salonia.it" REF "-" UA "-" gz% "-"
140.245.50.20 - - [20/Apr/2025:21:11:23 +0200] "GET /.env HTTP/1.1" 403 HOST "s.salonia.it" REF "-" UA "-" gz% "-"
140.245.50.20 - - [20/Apr/2025:21:17:59 +0200] "GET /.env HTTP/1.1" 403 HOST "salonia.it" REF "-" UA "-" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
80.75.212.115
20 Apr 2025
Apr 20 20:14:06 localhost sshd-session[23174]: banner exchange: Connection from 80.75.212.115 port 5 ...
show more
Apr 20 20:14:06 localhost sshd-session[23174]: banner exchange: Connection from 80.75.212.115 port 52696: invalid format
Apr 20 20:14:06 localhost sshd-session[23175]: banner exchange: Connection from 80.75.212.115 port 52686: invalid format
Apr 20 20:39:22 localhost sshd-session[24098]: banner exchange: Connection from 80.75.212.115 port 49026: invalid format
...
show less
Brute-Force
SSH
๐ฎ๐น
81.56.131.31
19 Apr 2025
Apr 19 08:39:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 19 08:39:21 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=81.56.131.31 DST=192.168.1.88 LEN=491 TOS=0x00 PREC=0x00 TTL=54 ID=60095 DF PROTO=TCP SPT=51413 DPT=54239 WINDOW=509 RES=0x00 ACK PSH URGP=0
Apr 19 08:39:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=81.56.131.31 DST=192.168.1.88 LEN=507 TOS=0x00 PREC=0x00 TTL=54 ID=12389 DF PROTO=TCP SPT=51413 DPT=47693 WINDOW=507 RES=0x00 ACK PSH URGP=0
Apr 19 08:39:57 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=81.56.131.31 DST=192.168.1.88 LEN=507 TOS=0x00 PREC=0x00 TTL=54 ID=12390 DF PROTO=TCP SPT=51413 DPT=47693 WINDOW=507 RES=0x00 ACK PSH URGP=0
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ช๐ธ
93.176.179.157
18 Apr 2025
Apr 18 17:02:06 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 18 17:02:06 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=93.176.179.157 DST=192.168.1.88 LEN=342 TOS=0x04 PREC=0x00 TTL=51 ID=52131 DF PROTO=TCP SPT=61877 DPT=39327 WINDOW=235 RES=0x00 ACK PSH URGP=0
Apr 18 17:02:06 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=93.176.179.157 DST=192.168.1.88 LEN=342 TOS=0x04 PREC=0x00 TTL=51 ID=52132 DF PROTO=TCP SPT=61877 DPT=39327 WINDOW=235 RES=0x00 ACK PSH URGP=0
Apr 18 17:26:07 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=93.176.179.157 DST=192.168.1.88 LEN=399 TOS=0x04 PREC=0x00 TTL=50 ID=47307 DF PROTO=TCP SPT=61877 DPT=39263 WINDOW=235 RES=0x00 ACK PSH URGP=0
...
show less
Brute-Force
Exploited Host
Web App Attack
๐จ๐ฆ
50.72.165.236
18 Apr 2025
Apr 18 16:55:49 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 18 16:55:49 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=50.72.165.236 DST=192.168.1.88 LEN=1417 TOS=0x00 PREC=0x00 TTL=42 ID=10702 PROTO=UDP SPT=51413 DPT=14880 LEN=1397
Apr 18 16:55:50 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=50.72.165.236 DST=192.168.1.88 LEN=1417 TOS=0x00 PREC=0x00 TTL=42 ID=58616 PROTO=UDP SPT=51413 DPT=14880 LEN=1397
Apr 18 16:55:54 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=50.72.165.236 DST=192.168.1.88 LEN=1417 TOS=0x00 PREC=0x00 TTL=42 ID=63641 PROTO=UDP SPT=51413 DPT=14880 LEN=1397
...
show less
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
135.119.205.212
13 Apr 2025
135.119.205.212 - - [13/Apr/2025:20:50:27 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" RE ...
show more
135.119.205.212 - - [13/Apr/2025:20:50:27 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
135.119.205.212 - - [13/Apr/2025:20:50:27 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
135.119.205.212 - - [13/Apr/2025:20:50:27 +0200] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ณ๐ฑ
45.154.98.162
12 Apr 2025
45.154.98.162 - - [12/Apr/2025:19:13:19 +0200] "GET / HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA " ...
show more
45.154.98.162 - - [12/Apr/2025:19:13:19 +0200] "GET / HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" gz% "-"
45.154.98.162 - - [12/Apr/2025:19:13:19 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" gz% "-"
45.154.98.162 - - [12/Apr/2025:19:13:19 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 401 HOST "d.salonia.it" REF "-" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
18.189.30.69
12 Apr 2025
Apr 12 13:07:49 localhost sshd-session[14116]: banner exchange: Connection from 18.189.30.69 port 39 ...
show more
Apr 12 13:07:49 localhost sshd-session[14116]: banner exchange: Connection from 18.189.30.69 port 39770: invalid format
Apr 12 13:09:35 localhost sshd-session[14254]: banner exchange: Connection from 18.189.30.69 port 58376: invalid format
Apr 12 13:11:00 localhost sshd-session[14324]: banner exchange: Connection from 18.189.30.69 port 39258: invalid format
...
show less
Brute-Force
SSH
๐บ๐ธ
135.119.141.139
10 Apr 2025
135.119.141.139 - - [11/Apr/2025:00:56:34 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" RE ...
show more
135.119.141.139 - - [11/Apr/2025:00:56:34 +0200] "HEAD /wordpress HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wordpress" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
135.119.141.139 - - [11/Apr/2025:00:56:34 +0200] "HEAD / HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
135.119.141.139 - - [11/Apr/2025:00:56:35 +0200] "HEAD /wp HTTP/1.1" 405 HOST "salonia.it" REF "http://salonia.it/wp" UA "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" gz% "-"
...
show less
Brute-Force
Exploited Host
Web App Attack
๐ช๐ธ
212.30.33.34
06 Apr 2025
Apr 6 15:21:42 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:0 ...
show more
Apr 6 15:21:42 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.30.33.34 DST=192.168.1.88 LEN=1350 TOS=0x00 PREC=0x00 TTL=116 ID=37941 DF PROTO=TCP SPT=14948 DPT=14880 WINDOW=252 RES=0x00 ACK URGP=0
Apr 6 15:21:42 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.30.33.34 DST=192.168.1.88 LEN=1350 TOS=0x00 PREC=0x00 TTL=116 ID=37942 DF PROTO=TCP SPT=14948 DPT=14880 WINDOW=252 RES=0x00 ACK URGP=0
Apr 6 15:21:42 localhost kernel: [UFW BLOCK] IN=eth0 OUT= MAC=d8:bb:c1:8d:b6:bb:08:16:05:01:e2:a0:08:00 SRC=212.30.33.34 DST=192.168.1.88 LEN=1350 TOS=0x00 PREC=0x00 TTL=116 ID=37944 DF PROTO=TCP SPT=14948 DPT=14880 WINDOW=252 RES=0x00 ACK URGP=0
...
show less
Brute-Force
Exploited Host
Web App Attack