🇺🇸
TPI-Abuse
2025-03-31 00:31:50
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 30 20:31:43.645631 2025] [security2:error] [pid 32704:tid 32704] [client 104.167.24.246:34323] [client 104.167.24.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||swwpccpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "swwpccpa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-nib04S4sI8qRyfqDEHyAAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
SilverZippo
2024-12-23 11:07:29
(1 year ago)
Web App Attack
Web App Attack
🇨🇿
lp
2024-12-21 13:22:55
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 104.167.24.246
2024-12-21T13:05:01+01 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 104.167.24.246
2024-12-21T13:05:01+01:00 vpn Access-Reject 'xcutp00' station: 104.167.24.246 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2024-12-20 23:20:10
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Jean Valjean
2024-12-17 11:03:37
(1 year ago)
Fail2ban Caboom : wp-login.php Bruteforce
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-12-13 07:19:34
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 13 02:19:28.753195 2024] [security2:error] [pid 11445:tid 11445] [client 104.167.24.246:47641] [client 104.167.24.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||palacio.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "palacio.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1vgAFcnlCOfG1ZfO33hsQAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-12-13 05:47:08
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-12-12 13:42:09
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 104.167.24.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 12 08:42:04.364426 2024] [security2:error] [pid 3400721:tid 3400721] [client 104.167.24.246:58535] [client 104.167.24.246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heinzmail.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heinzmail.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1roLLvVVAw9nYSZKHXUwQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-12-08 04:32:47
(1 year ago)
$f2bV_matches
Brute-Force
Bad Web Bot
Web App Attack
2024-12-02 14:35:03
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
Psycho Solutions LLC
2024-12-01 13:46:24
(1 year ago)
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ...
show more
Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 12/1/2024 1:46 pm (UTC-6)
show less
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2024-07-20 13:34:53
(1 year ago)
Credential Stuffing
Brute-Force