🇹🇷
rtbh.com.tr
2025-05-09 20:06:31
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-05-09 00:06:30
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-05-08 20:06:31
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪
cmbplf
2025-05-07 23:28:49
(1 year ago)
14.236 requests with url.path */xmlrpc.php
1.075 requests with url.path */wp-includes/wlwmanifest. ...
show more
14.236 requests with url.path */xmlrpc.php
1.075 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot
🇩🇪
LRob
2025-05-07 22:15:14
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-07 22:09:52
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 18:09:44.022821 2025] [security2:error] [pid 3342793:tid 3342802] [client 104.199.45.7:58301] [client 104.199.45.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.busybeerestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.busybeerestaurant.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBvaKP4wSxv-cWoq4CIVsgAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-07 21:53:20
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 17:53:13.674512 2025] [security2:error] [pid 2736237:tid 2736334] [client 104.199.45.7:57963] [client 104.199.45.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.alexanderwarnow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alexanderwarnow.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBvWSXZR5E8WDvd3JxjoHgAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-07 21:34:03
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 104.199.45.7 (7.45.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 17:33:59.105147 2025] [security2:error] [pid 3808479:tid 3808609] [client 104.199.45.7:52458] [client 104.199.45.7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sailcleaner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sailcleaner.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBvRx8BJVS32bMlujkgZOQAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
lthde
2022-08-29 06:08:51
(4 years ago)
HIGH - 104.199.45.7 GET /index.php - User enumeration scan (author archives)
Web App Attack
2022-08-20 10:55:09
(4 years ago)
Webpage scraping
Bad Web Bot
🇬🇧
Bytemark
2022-08-19 17:33:32
(4 years ago)
104.199.45.7 - - [19/Aug/2022:22:33:31 +0100] "GET / HTTP/1.1" 301 7168 "-" "Python/3.8 aiohttp/3.8. ...
show more
104.199.45.7 - - [19/Aug/2022:22:33:31 +0100] "GET / HTTP/1.1" 301 7168 "-" "Python/3.8 aiohttp/3.8.1"
show less
Brute-Force
Web App Attack
2022-08-17 04:26:54
(4 years ago)
/magento_version
/install.php
/util/login.aspx
Web App Attack
🇳🇱
Savvii
2022-08-11 05:52:19
(4 years ago)
21 attempts against mh-misbehave-ban on pluto
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
vestibtech
2022-08-11 02:08:05
(4 years ago)
104.199.45.7 - - [11/Aug/2022:00:08:04 -0600] "GET /util/login.aspx HTTP/1.1" 301 519 "-" "Mozilla/5 ...
show more
104.199.45.7 - - [11/Aug/2022:00:08:04 -0600] "GET /util/login.aspx HTTP/1.1" 301 519 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Firefox/52.0"
...
show less
Web App Attack
🇨🇭
backslash
2022-08-10 20:05:15
(4 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot