Hello,
i have detectet that someone tried to upload a file via /wp-admin/admin.php and i am not sure if this actions werer blocked and if i need to take any action according to this. I also let NinjaScanner check the site and everything looks fine.Thanks in advance
Attached the log section:
18/May/23 17:50:42 #4579491 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 17:52:32 #3853149 UPLOAD - 109.237.98.235 POST /index.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:52:32 #2317877 CRITICAL 8 109.237.98.235 POST /index.php - Suspicious file - [FILES:files = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpBbGfrA 194] - _
18/May/23 17:53:32 #1447358 UPLOAD - 109.237.98.235 POST /wp-admin/admin.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:53:32 #5682097 CRITICAL 8 109.237.98.235 POST /wp-admin/admin.php - Suspicious file - [FILES:album_img = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpbhfv7D 194] - _
18/May/23 17:53:52 #5745805 UPLOAD - 109.237.98.235 POST /wp-admin/admin.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:53:52 #6378082 CRITICAL 8 109.237.98.235 POST /wp-admin/admin.php - Suspicious file - [FILES:album_img = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpfhO68D 194] - _
18/May/23 17:54:10 #6988755 UPLOAD - 109.237.98.235 POST /wp-admin/admin.php - File upload detected, no action taken - [sys_config_main.ph94 bytes)] - _
18/May/23 17:54:10 #5636788 CRITICAL 8 109.237.98.235 POST /wp-admin/admin.php - Suspicious file - [FILES:album_img = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpEWstbG 194] - _
18/May/23 17:54:25 #7195203 UPLOAD - 109.237.98.235 POST /wp-admin/admin.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:54:25 #6985244 CRITICAL 8 109.237.98.235 POST /wp-admin/admin.php - Suspicious file - [FILES:album_img = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpx3o60F 194] - _
18/May/23 17:54:46 #5428266 UPLOAD - 109.237.98.235 POST /wp-admin/admin.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:54:46 #4202877 CRITICAL 8 109.237.98.235 POST /wp-admin/admin.php - Suspicious file - [FILES:album_img = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpxErK3F 194] - _
18/May/23 17:59:05 #8482015 UPLOAD - 109.237.98.235 POST /index.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 17:59:05 #4374352 CRITICAL 8 109.237.98.235 POST /index.php - Suspicious file - [FILES:files = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpPlORRP 194] - _
18/May/23 17:59:29 #3072756 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 17:59:58 #1872030 CRITICAL - 109.237.98.235 POST /index.php - Blocked file upload attempt (MIME-type mismatch) - [sys_config_main.php != multipart/form-data] - _
18/May/23 18:00:32 #7690263 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:02:13 #7441371 UPLOAD - 109.237.98.235 POST /index.php - File upload detected, no action taken - [sys_config_main.php (194 bytes)] - _
18/May/23 18:02:13 #2091167 CRITICAL 8 109.237.98.235 POST /index.php - Suspicious file - [FILES:file = sys_config_main.php sys_config_main.php /opt/bitnami/php/tmp/phpAikxAD 194] - _
18/May/23 18:02:36 #5266099 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:03:37 #6093600 UPLOAD - 109.237.98.235 POST /wp-admin/admin-post.php - File upload detected, no action taken - [wp-system2.zip (277 bytes)] - _
18/May/23 18:03:55 #1301022 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:04:18 #3919922 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:05:08 #1668740 CRITICAL - 109.237.98.235 POST /wp-admin/admin-post.php - Blocked file upload attempt (MIME-type mismatch) - [sys_config_main.php != text/html] - _
18/May/23 18:05:44 #6256096 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:06:43 #5690941 CRITICAL - 109.237.98.235 POST /index.php - Blocked file upload attempt (MIME-type mismatch) - [sys_config_main.php != text/html] - _
18/May/23 18:07:26 #2092433 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:08:08 #7493756 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _
18/May/23 18:08:22 #7174668 MEDIUM - 109.237.98.235 POST /wp-admin/admin-ajax.php - Blocked access to admin-ajax.php - [bot detection is enabled] - _