🇺🇸
octageeks.com
2023-12-24 05:10:13
(2 years ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
octageeks.com
2023-12-22 05:10:55
(2 years ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
octageeks.com
2023-12-21 05:10:21
(2 years ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
octageeks.com
2023-12-20 05:10:12
(2 years ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 06:03:46
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 18 01:03:43.623248 2023] [security2:error] [pid 1560] [client 121.196.169.184:60940] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||towncenters.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "towncenters.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX_gv50V1UH9MJBqG8ODaQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2023-12-18 05:11:06
(2 years ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 05:09:56
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 18 00:09:51.322813 2023] [security2:error] [pid 5876] [client 121.196.169.184:37010] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wsspy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wsspy.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX_UH-Gm1ybIkw_ZoijGyQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 04:36:21
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 23:36:13.858495 2023] [security2:error] [pid 17352] [client 121.196.169.184:40624] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iggysseremba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iggysseremba.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX_MPaSodaxNhWXQaNK0zwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 03:36:49
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 22:36:44.515801 2023] [security2:error] [pid 13946] [client 121.196.169.184:35524] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||naturalacu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "naturalacu.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX--TMuR4mkFRQsTZkoiywAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 02:17:04
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 21:17:01.563988 2023] [security2:error] [pid 32278] [client 121.196.169.184:50734] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tenmenband.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tenmenband.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-rnZJTwsteuSR71WNrzgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 01:52:37
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 20:52:32.387599 2023] [security2:error] [pid 2800:tid 47751398196992] [client 121.196.169.184:48226] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iancaird.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iancaird.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-l4DxZvAx3vIgysjE_dwAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 23:46:40
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 18:46:37.123681 2023] [security2:error] [pid 28367] [client 121.196.169.184:51232] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||affiliateebusiness.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "affiliateebusiness.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-IXZLP0-8p3z6eZVp7AQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 23:08:24
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 18:08:20.278657 2023] [security2:error] [pid 27451] [client 121.196.169.184:38734] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gatlintire.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gatlintire.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9_ZDuNwdgI-c5J5kUXvgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 22:07:57
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 121.196.169.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 17:07:51.986026 2023] [security2:error] [pid 27544] [client 121.196.169.184:59548] [client 121.196.169.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mypensees.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mypensees.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9xNy9mrtvg6QCKLz8cNAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-12-17 21:07:02
(2 years ago)
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /wp-login.php HTTP/1.1
Hacking
Web App Attack