116.7.212.172
19 May 2025
May 18 23:48:20 ogbcashdown postfix/postscreen[3199387]: NOQUEUE: reject: RCPT from [116.7.212.172]: ... show more May 18 23:48:20 ogbcashdown postfix/postscreen[3199387]: NOQUEUE: reject: RCPT from [116.7.212.172]:36177: 550 5.7.1 Service unavailable; client [116.7.212.172] blocked using zen.spamhaus.org; from=<[email protected] >, to=<[email protected] >, proto=ESMTP, helo=<huo>
May 18 23:48:21 ogbcashdown postfix/postscreen[3199387]: NOQUEUE: reject: RCPT from [116.7.212.172]:36177: 550 5.7.1 Service unavailable; client [116.7.212.172] blocked using zen.spamhaus.org; from=<[email protected] >, to=<[email protected] >, proto=ESMTP, helo=<huo>
May 18 23:48:23 ogbcashdown postfix/postscreen[3199387]: NOQUEUE: reject: RCPT from [116.7.212.172]:36177: 550 5.7.1 Service unavailable; client [116.7.212.172] blocked using zen.spamhaus.org; from=<[email protected] >, to=<[email protected] >, proto=ESMTP, helo=<huo>
... show less
Brute-Force
170.39.217.108
18 May 2025
[Sat May 17 22:44:50.422791 2025] [proxy_fcgi:error] [pid 2674476] [client 170.39.217.108:1662] AH01 ... show more [Sat May 17 22:44:50.422791 2025] [proxy_fcgi:error] [pid 2674476] [client 170.39.217.108:1662] AH01071: Got error 'Primary script unknown'
[Sat May 17 22:44:50.599073 2025] [proxy_fcgi:error] [pid 2674465] [client 170.39.217.108:26378] AH01071: Got error 'Primary script unknown'
[Sat May 17 22:44:51.082663 2025] [proxy_fcgi:error] [pid 2674465] [client 170.39.217.108:26378] AH01071: Got error 'Primary script unknown'
[Sat May 17 22:44:54.702699 2025] [proxy_fcgi:error] [pid 2674302] [client 170.39.217.108:1690] AH01071: Got error 'Primary script unknown'
[Sat May 17 22:45:04.438906 2025] [proxy_fcgi:error] [pid 2674313] [client 170.39.217.108:26388] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
170.39.217.106
17 May 2025
[Sat May 17 16:55:24.695945 2025] [proxy_fcgi:error] [pid 2603758] [client 170.39.217.106:11590] AH0 ... show more [Sat May 17 16:55:24.695945 2025] [proxy_fcgi:error] [pid 2603758] [client 170.39.217.106:11590] AH01071: Got error 'Primary script unknown'
[Sat May 17 16:55:24.717009 2025] [proxy_fcgi:error] [pid 2578148] [client 170.39.217.106:11596] AH01071: Got error 'Primary script unknown'
[Sat May 17 16:55:24.910770 2025] [proxy_fcgi:error] [pid 2578148] [client 170.39.217.106:11596] AH01071: Got error 'Primary script unknown'
[Sat May 17 16:55:25.047249 2025] [proxy_fcgi:error] [pid 2603758] [client 170.39.217.106:11590] AH01071: Got error 'Primary script unknown'
[Sat May 17 16:55:25.072891 2025] [proxy_fcgi:error] [pid 2570170] [client 170.39.217.106:29084] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
213.202.253.4
17 May 2025
[Sat May 17 00:26:58.093559 2025] [authz_core:error] [pid 2315764] [client 213.202.253.4:49608] AH01 ... show more [Sat May 17 00:26:58.093559 2025] [authz_core:error] [pid 2315764] [client 213.202.253.4:49608] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
[Sat May 17 00:26:58.424237 2025] [access_compat:error] [pid 2315764] [client 213.202.253.4:49608] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Sat May 17 00:26:58.426978 2025] [authz_core:error] [pid 2315764] [client 213.202.253.4:49608] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
[Sat May 17 00:26:58.742152 2025] [access_compat:error] [pid 2315764] [client 213.202.253.4:49608] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Sat May 17 00:26:58.744953 2025] [authz_core:error] [pid 2315764] [client 213.202.253.4:49608] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf
... show less
Brute-Force
Web App Attack
45.38.44.252
16 May 2025
[Fri May 16 05:52:50.525403 2025] [proxy_fcgi:error] [pid 1667299] [client 45.38.44.252:64291] AH010 ... show more [Fri May 16 05:52:50.525403 2025] [proxy_fcgi:error] [pid 1667299] [client 45.38.44.252:64291] AH01071: Got error 'Primary script unknown'
[Fri May 16 05:52:50.560666 2025] [proxy_fcgi:error] [pid 1667299] [client 45.38.44.252:64291] AH01071: Got error 'Primary script unknown'
[Fri May 16 05:52:50.594134 2025] [proxy_fcgi:error] [pid 1667299] [client 45.38.44.252:64291] AH01071: Got error 'Primary script unknown'
[Fri May 16 05:52:50.912318 2025] [proxy_fcgi:error] [pid 1857411] [client 45.38.44.252:65229] AH01071: Got error 'Primary script unknown'
[Fri May 16 05:52:50.940492 2025] [proxy_fcgi:error] [pid 1857411] [client 45.38.44.252:65229] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
144.126.135.153
15 May 2025
[Thu May 15 17:31:01.805136 2025] [proxy_fcgi:error] [pid 1583156] [client 144.126.135.153:63944] AH ... show more [Thu May 15 17:31:01.805136 2025] [proxy_fcgi:error] [pid 1583156] [client 144.126.135.153:63944] AH01071: Got error 'Primary script unknown'
[Thu May 15 17:31:01.820997 2025] [proxy_fcgi:error] [pid 1583159] [client 144.126.135.153:63972] AH01071: Got error 'Primary script unknown'
[Thu May 15 17:31:01.945499 2025] [proxy_fcgi:error] [pid 1578369] [client 144.126.135.153:64101] AH01071: Got error 'Primary script unknown'
[Thu May 15 17:31:01.976941 2025] [proxy_fcgi:error] [pid 1591157] [client 144.126.135.153:64137] AH01071: Got error 'Primary script unknown'
[Thu May 15 17:31:02.040439 2025] [proxy_fcgi:error] [pid 1583159] [client 144.126.135.153:61641] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
52.169.85.61
15 May 2025
[Thu May 15 04:04:32.123333 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH0107 ... show more [Thu May 15 04:04:32.123333 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH01071: Got error 'Primary script unknown'
[Thu May 15 04:04:33.160405 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH01071: Got error 'Primary script unknown'
[Thu May 15 04:04:34.007190 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH01071: Got error 'Primary script unknown'
[Thu May 15 04:04:35.139046 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH01071: Got error 'Primary script unknown'
[Thu May 15 04:04:35.361772 2025] [proxy_fcgi:error] [pid 1268150] [client 52.169.85.61:6167] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
213.232.87.230
14 May 2025
[Wed May 14 08:37:56.795284 2025] [proxy_fcgi:error] [pid 965779] [client 213.232.87.230:3085] AH010 ... show more [Wed May 14 08:37:56.795284 2025] [proxy_fcgi:error] [pid 965779] [client 213.232.87.230:3085] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:56.797080 2025] [proxy_fcgi:error] [pid 965830] [client 213.232.87.230:4655] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:56.859962 2025] [proxy_fcgi:error] [pid 961590] [client 213.232.87.230:9651] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:56.932313 2025] [proxy_fcgi:error] [pid 961604] [client 213.232.87.230:39445] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:57.411172 2025] [proxy_fcgi:error] [pid 965770] [client 213.232.87.230:29123] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
213.232.87.228
14 May 2025
[Wed May 14 08:37:51.429500 2025] [proxy_fcgi:error] [pid 951716] [client 213.232.87.228:46209] AH01 ... show more [Wed May 14 08:37:51.429500 2025] [proxy_fcgi:error] [pid 951716] [client 213.232.87.228:46209] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:51.991762 2025] [proxy_fcgi:error] [pid 961603] [client 213.232.87.228:45623] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:54.274873 2025] [proxy_fcgi:error] [pid 771698] [client 213.232.87.228:45415] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:54.574022 2025] [proxy_fcgi:error] [pid 811972] [client 213.232.87.228:8961] AH01071: Got error 'Primary script unknown'
[Wed May 14 08:37:55.016588 2025] [proxy_fcgi:error] [pid 965796] [client 213.232.87.228:23155] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
145.239.100.68
14 May 2025
May 14 01:57:03 ogbcashdown phpMyAdmin[765102]: user denied: root (mysql-denied) from 145.239.100.68 ... show more May 14 01:57:03 ogbcashdown phpMyAdmin[765102]: user denied: root (mysql-denied) from 145.239.100.68
May 14 01:57:03 ogbcashdown phpMyAdmin[549146]: user denied: root (mysql-denied) from 145.239.100.68
May 14 01:57:04 ogbcashdown phpMyAdmin[555321]: user denied: root (mysql-denied) from 145.239.100.68
May 14 01:57:04 ogbcashdown phpMyAdmin[765102]: user denied: root (mysql-denied) from 145.239.100.68
May 14 01:57:04 ogbcashdown phpMyAdmin[555321]: user denied: root (mysql-denied) from 145.239.100.68
... show less
Brute-Force
52.169.80.164
14 May 2025
[Wed May 14 01:55:14.431086 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH0107 ... show more [Wed May 14 01:55:14.431086 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH01071: Got error 'Primary script unknown'
[Wed May 14 01:55:14.920891 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH01071: Got error 'Primary script unknown'
[Wed May 14 01:55:15.803636 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH01071: Got error 'Primary script unknown'
[Wed May 14 01:55:16.887362 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH01071: Got error 'Primary script unknown'
[Wed May 14 01:55:17.072979 2025] [proxy_fcgi:error] [pid 771321] [client 52.169.80.164:8171] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
186.3.198.68
14 May 2025
May 13 21:10:36 ogbcashdown phpMyAdmin[555321]: user denied: root (mysql-denied) from 186.3.198.68<b ... show more May 13 21:10:36 ogbcashdown phpMyAdmin[555321]: user denied: root (mysql-denied) from 186.3.198.68
May 13 21:10:36 ogbcashdown phpMyAdmin[549146]: user denied: root (mysql-denied) from 186.3.198.68
May 13 21:10:37 ogbcashdown phpMyAdmin[547174]: user denied: root (mysql-denied) from 186.3.198.68
May 13 21:10:37 ogbcashdown phpMyAdmin[555321]: user denied: root (mysql-denied) from 186.3.198.68
May 13 21:10:37 ogbcashdown phpMyAdmin[549146]: user denied: root (mysql-denied) from 186.3.198.68
... show less
Brute-Force
2a03:6f00:1::5c35:60c1
13 May 2025
May 13 03:15:46 ogbcashdown wp(ogbcashdown.org)[274478]: Authentication attempt for unknown user adm ... show more May 13 03:15:46 ogbcashdown wp(ogbcashdown.org)[274478]: Authentication attempt for unknown user admin from 2a03:6f00:1::5c35:60c1
May 13 18:18:35 ogbcashdown wp(ogbcashdown.org)[555321]: Authentication attempt for unknown user admin from 2a03:6f00:1::5c35:60c1
... show less
Brute-Force
Web App Attack
115.247.217.226
13 May 2025
115.247.217.226 - - [13/May/2025:05:58:10 -0500] "GET / HTTP/1.1" 200 35859 "-" "Mozilla/5.0 (compat ... show more 115.247.217.226 - - [13/May/2025:05:58:10 -0500] "GET / HTTP/1.1" 200 35859 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
... show less
Brute-Force
Bad Web Bot
199.195.252.57
13 May 2025
May 13 05:00:26 ogbcashdown wp(ogbcashdown.org)[295001]: Authentication attempt for unknown user adm ... show more May 13 05:00:26 ogbcashdown wp(ogbcashdown.org)[295001]: Authentication attempt for unknown user admin from 199.195.252.57
May 13 05:01:07 ogbcashdown wp(ogbcashdown.org)[292835]: Authentication attempt for unknown user from 199.195.252.57
... show less
Brute-Force
Web App Attack
52.169.123.251
12 May 2025
[Mon May 12 17:24:50.956240 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH0107 ... show more [Mon May 12 17:24:50.956240 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH01071: Got error 'Primary script unknown'
[Mon May 12 17:24:51.358022 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH01071: Got error 'Primary script unknown'
[Mon May 12 17:24:51.569322 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH01071: Got error 'Primary script unknown'
[Mon May 12 17:24:52.087988 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH01071: Got error 'Primary script unknown'
[Mon May 12 17:24:52.203959 2025] [proxy_fcgi:error] [pid 16200] [client 52.169.123.251:8779] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
154.83.103.106
12 May 2025
[Mon May 12 13:52:10.694107 2025] [proxy_fcgi:error] [pid 4160921] [client 154.83.103.106:14992] AH0 ... show more [Mon May 12 13:52:10.694107 2025] [proxy_fcgi:error] [pid 4160921] [client 154.83.103.106:14992] AH01071: Got error 'Primary script unknown'
[Mon May 12 13:52:11.663512 2025] [proxy_fcgi:error] [pid 4160921] [client 154.83.103.106:14992] AH01071: Got error 'Primary script unknown'
[Mon May 12 13:52:13.324862 2025] [proxy_fcgi:error] [pid 4160921] [client 154.83.103.106:14992] AH01071: Got error 'Primary script unknown'
[Mon May 12 13:55:58.698342 2025] [proxy_fcgi:error] [pid 4158013] [client 154.83.103.106:35336] AH01071: Got error 'Primary script unknown'
[Mon May 12 13:55:59.666732 2025] [proxy_fcgi:error] [pid 4158013] [client 154.83.103.106:35336] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
48.217.66.172
12 May 2025
May 12 13:24:40 ogbcashdown wp(ogbcashdown.org)[4169826]: Authentication attempt for unknown user ad ... show more May 12 13:24:40 ogbcashdown wp(ogbcashdown.org)[4169826]: Authentication attempt for unknown user admin from 48.217.66.172
May 12 13:24:42 ogbcashdown wp(ogbcashdown.org)[4184527]: Authentication attempt for unknown user admin from 48.217.66.172
... show less
Brute-Force
Web App Attack
194.163.152.77
12 May 2025
194.163.152.77 - - [12/May/2025:11:29:49 -0500] "GET //ogbcashdown.org/wp-includes/js/jquery/jquery. ... show more 194.163.152.77 - - [12/May/2025:11:29:49 -0500] "GET //ogbcashdown.org/wp-includes/js/jquery/jquery.min.js HTTP/1.1" 301 4399 "-" "EmailWolf 1.00"
... show less
Brute-Force
Bad Web Bot
205.209.96.94
12 May 2025
May 12 00:47:14 ogbcashdown phpMyAdmin[3918515]: user denied: root (mysql-denied) from 205.209.96.94 ... show more May 12 00:47:14 ogbcashdown phpMyAdmin[3918515]: user denied: root (mysql-denied) from 205.209.96.94
May 12 00:47:14 ogbcashdown phpMyAdmin[3918515]: user denied: root (mysql-denied) from 205.209.96.94
May 12 00:47:14 ogbcashdown phpMyAdmin[3915911]: user denied: root (mysql-denied) from 205.209.96.94
May 12 00:47:14 ogbcashdown phpMyAdmin[3918515]: user denied: root (mysql-denied) from 205.209.96.94
May 12 00:47:15 ogbcashdown phpMyAdmin[3915911]: user denied: root (mysql-denied) from 205.209.96.94
... show less
Brute-Force
87.251.78.46
11 May 2025
[Sun May 11 11:30:45.620208 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH010 ... show more [Sun May 11 11:30:45.620208 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH01071: Got error 'Primary script unknown'
[Sun May 11 11:30:45.772366 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH01071: Got error 'Primary script unknown'
[Sun May 11 11:30:46.089678 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH01071: Got error 'Primary script unknown'
[Sun May 11 11:30:46.242972 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH01071: Got error 'Primary script unknown'
[Sun May 11 11:30:46.399938 2025] [proxy_fcgi:error] [pid 3637507] [client 87.251.78.46:33137] AH01071: Got error 'Primary script unknown'
... show less
Brute-Force
Web App Attack
109.202.99.41
11 May 2025
[Sun May 11 05:48:32.643111 2025] [authz_core:error] [pid 3404058] [client 109.202.99.41:14415] AH01 ... show more [Sun May 11 05:48:32.643111 2025] [authz_core:error] [pid 3404058] [client 109.202.99.41:14415] AH01630: client denied by server configuration: /var/www/blocked/server-status
[Sun May 11 05:48:34.048062 2025] [authz_core:error] [pid 3453254] [client 109.202.99.41:32247] AH01630: client denied by server configuration: /var/www/roundcube/server-status
[Sun May 11 05:48:35.913915 2025] [authz_core:error] [pid 3453319] [client 109.202.99.41:32789] AH01630: client denied by server configuration: /var/www/roundcube/config/production.json
[Sun May 11 05:48:35.918210 2025] [authz_core:error] [pid 3453357] [client 109.202.99.41:42725] AH01630: client denied by server configuration: /var/www/wordpress/server-status
[Sun May 11 05:48:35.920959 2025] [authz_core:error] [pid 3453365] [client 109.202.99.41:24453] AH01630: client denied by server configuration: /var/www/postfixadmin/public/server-status
... show less
Brute-Force
Web App Attack
13.79.236.2
11 May 2025
[Sat May 10 23:24:07.926080 2025] [authz_core:error] [pid 3240598] [client 13.79.236.2:10642] AH0163 ... show more [Sat May 10 23:24:07.926080 2025] [authz_core:error] [pid 3240598] [client 13.79.236.2:10642] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/plugins/akismet/
[Sat May 10 23:24:17.411566 2025] [access_compat:error] [pid 3240598] [client 13.79.236.2:10642] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Sat May 10 23:24:17.417069 2025] [authz_core:error] [pid 3240598] [client 13.79.236.2:10642] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
[Sat May 10 23:24:18.013073 2025] [access_compat:error] [pid 3240598] [client 13.79.236.2:10642] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Sat May 10 23:24:18.014674 2025] [authz_core:error] [pid 3240598] [client 13.79.236.2:10642] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
... show less
Brute-Force
Web App Attack
2604:7c00:18:a::2
10 May 2025
May 10 08:51:38 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a:: ... show more May 10 08:51:38 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a::2): unknown user
May 10 08:52:32 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a::2): unknown user
May 10 08:53:25 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a::2): unknown user
May 10 08:54:20 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a::2): unknown user
May 10 08:55:15 ogbcashdown dovecot: auth-worker(3095980): sql([email protected] ,2604:7c00:18:a::2): unknown user
... show less
Brute-Force
52.169.80.131
08 May 2025
[Thu May 08 16:31:45.058912 2025] [access_compat:error] [pid 2104942] [client 52.169.80.131:5224] AH ... show more [Thu May 08 16:31:45.058912 2025] [access_compat:error] [pid 2104942] [client 52.169.80.131:5224] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Thu May 08 16:31:45.065652 2025] [authz_core:error] [pid 2104942] [client 52.169.80.131:5224] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
[Thu May 08 16:33:03.363231 2025] [access_compat:error] [pid 2100670] [client 52.169.80.131:5560] AH01797: client denied by server configuration: /var/www/wordpress/wp-content/uploads/acoofm_uploads/index.php
[Thu May 08 16:33:03.364677 2025] [authz_core:error] [pid 2100670] [client 52.169.80.131:5560] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/uploads/wpcf7_uploads/
[Thu May 08 16:33:36.557560 2025] [authz_core:error] [pid 2100670] [client 52.169.80.131:5560] AH01630: client denied by server configuration: /var/www/wordpress/wp-content/plugins/akismet/
... show less
Brute-Force
Web App Attack