Vulnerability searching
/filemanager/dialog.php
/assets/filemanager/dialog.php
09/01/2022 06:50:0 ...
show moreVulnerability searching
/filemanager/dialog.php
/assets/filemanager/dialog.php
09/01/2022 06:50:07
IP: 159.223.90.67 Hostname: 159.223.90.67
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
show less
Vulnerability Searching / Single IP source DoS flooding attempt
~26 attempts per second in 1 second ...
show moreVulnerability Searching / Single IP source DoS flooding attempt
~26 attempts per second in 1 second bursts
/api/.env
/test/.env
/_profiler/phpinfo
/public/.env
/developer/.env
/core/.env
/.aws/credentials
/phpinfo.php
/phpinfo
09/01/2022 13:37:33
IP: 185.2.103.23 Hostname: m1557.contaboserver.net
Human/Bot: Bot
Python/3.8 aiohttp/3.8.1
show less
Attempt to gain user details
/wp-json/wp/v2/users
/?rest_route=/wp/v2/users
03/01/2022 00:54:10
...
show moreAttempt to gain user details
/wp-json/wp/v2/users
/?rest_route=/wp/v2/users
03/01/2022 00:54:10
IP: 84.32.188.2 Hostname: 84.32.188.2
Mozilla/5.1 (Windows NT 6.3; Win64; x64) AppleWebKit/529 (KHTML, like Gecko) Chrome/79.1.4 Safari/54
show less
Vulnerability searching
/wp-content/plugins/capability-manager-enhanced/readme.txt
04/01/2022 04:0 ...
show moreVulnerability searching
/wp-content/plugins/capability-manager-enhanced/readme.txt
04/01/2022 04:04:00
IP: 103.170.254.117 Hostname: 103.170.254.117
Human/Bot: Bot
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWeb Kit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36
show less
Attempt to get user credentials
//?author=1
//?author=2
//wp-json/wp/v2/users/
14/12/2021 09:06: ...
show moreAttempt to get user credentials
//?author=1
//?author=2
//wp-json/wp/v2/users/
14/12/2021 09:06:26
IP: 157.230.252.198 Hostname: 157.230.252.198
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36
show less
Vulnerability searching
/filemanager/dialog.php
23/11/2021 09:01:07
IP: 20.187.81.164 Hostname: 2 ...
show moreVulnerability searching
/filemanager/dialog.php
23/11/2021 09:01:07
IP: 20.187.81.164 Hostname: 20.187.81.164
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
Previous attempt within week from same IP & Browser:
Time: Tue, 16 Nov 21 18:56:01 +0000 -- 1637088961.752979 in Unixtime
URL: /filemanager/dialog.php
show less
Vulnerability searching & Brute-Force / Unauthorised Attempts to use WP REST API
16/Nov/21 13:06:16 ...
show moreVulnerability searching & Brute-Force / Unauthorised Attempts to use WP REST API
16/Nov/21 13:06:16 181.215.187.157 GET /index.php - WordPress: Blocked access to the WP REST API
/wp-json/wp/v2/pages/
16/11/2021 13:04:40
IP: 181.215.187.157 Hostname: sbesos.secretsbee.com
Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36
show less
Attempt to access and send spam emails
/?_wfsf=unlockEmail
09/11/2021 15:25:51 (1 day 19 hours ago ...
show moreAttempt to access and send spam emails
/?_wfsf=unlockEmail
09/11/2021 15:25:51 (1 day 19 hours ago)
IP: 199.249.230.167 Hostname: tor78.quintex.com
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.0 Safari/537.36
show less
Web SpamHackingSQL InjectionBrute-ForceWeb App Attack