Multiple WAF violations; Multiple Brute force login attempts. ; Mozilla/5.0 (compatible; SecurityR ...
show more Multiple WAF violations; Multiple Brute force login attempts. ; Mozilla/5.0 (compatible; SecurityResearch/1.0)
show less
Intento de acceso al sistema de archivos
Agente de usuario Mozilla/5.0 (compatible; SecurityResearc ...
show moreIntento de acceso al sistema de archivos
Agente de usuario Mozilla/5.0 (compatible; SecurityResearch/1.0)
show less
Intento de acceder a wp-admin oculto.
Agente de usuario Mozilla/5.0 (X11; Linux x86_64) AppleWebKit ...
show moreIntento de acceder a wp-admin oculto.
Agente de usuario Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36
show less
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 ...
show moreMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.10 ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.10 ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 ...
show moreMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36
show less
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 ...
show moreMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36
show less
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045 ...
show moreMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36
show less
Agente de usuario Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C ...
show moreAgente de usuario Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
show less
Intento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ...
show moreIntento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/0.1) Chrome/119.0.6045.214 Safari/537.36
show less
Intento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show moreIntento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
show less
Automated malicious scanner. Observed over 2 days against a WordPress site (logged via Cloudflare WA ...
show moreAutomated malicious scanner. Observed over 2 days against a WordPress site (logged via Cloudflare WAF + server firewall):
- Webshell/backdoor hunting: /worksec.php, /simple.php, /chosen.php, /wp-content/plugins/pwnd/
- Laravel secrets probing: /.env, /storage/logs/laravel.log, /_debugbar/open, /vendor/
- WordPress fingerprinting: systematic enumeration of /wp-includes/ libraries and theme asset paths (1 req every 4-5s)
- Repeated attempts to access wp-admin without authentication
- Rotating fake user agents (Android 7/Chrome 60, then macOS/Chrome 120)
show less
Método GET
Bot sospechoso bloqueado: php/
Cliente
Agente de usuario PHP/{5|6|7}.{3|2}.{1|2|3|4|5| ...
show moreMétodo GET
Bot sospechoso bloqueado: php/
Cliente
Agente de usuario PHP/{5|6|7}.{3|2}.{1|2|3|4|5|6|7|8|9|0}{1|2|3|4|5|6|7|8|9|0}
show less
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show moreBAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Intento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 l ...
show moreIntento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1
show less
Intento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ...
show moreIntento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
show less
Intento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, li ...
show moreIntento de inclusión remota de archivos
Agente de usuario Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
show less
Automated vulnerability scanner / bad web bot originating from Oracle Cloud Infrastructure. Initiati ...
show moreAutomated vulnerability scanner / bad web bot originating from Oracle Cloud Infrastructure. Initiating rapid multiple requests targeting administrative and authentication endpoints (`/admin`, `/login`, `/register`). Operating anonymously with spoofed user agents to probe the web application.
show less
Attempt to remotely include files. Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ...
show moreAttempt to remotely include files. Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
IP detected conducting aggressive user enumeration scans (?author=) and unauthorized automated vulne ...
show moreIP detected conducting aggressive user enumeration scans (?author=) and unauthorized automated vulnerability scanning via python-requests targeting WordPress core files (/wp-login.php and wp-json API endpoints). Repetitive hits blocked by local firewall and WAF.
show less