🇦🇺
MAGIC
2024-04-28 08:10:26
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-04-16 16:31:19
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 12:31:15.686668 2024] [security2:error] [pid 29416:tid 47357641783040] [client 139.59.2.175:5 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 12:31:15.686668 2024] [security2:error] [pid 29416:tid 47357641783040] [client 139.59.2.175:50684] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gryphix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gryphix.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zh6n0xEkUX2RDD7R2xgbEgAAAUE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2024-04-16 15:46:16
UTC ·
(2 years ago)
DIS: Web Attack GET //wp-includes/wlwmanifest.xml
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 15:30:09
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 11:30:02.210682 2024] [security2:error] [pid 22144] [client 139.59.2.175:61455] [client 139.5 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 11:30:02.210682 2024] [security2:error] [pid 22144] [client 139.59.2.175:61455] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ixd.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ixd.net"] [uri "/portfolio/interactions-with-swarms-of-robots-and-drones/wp-json/wp/v2/users/"] [unique_id "Zh6ZegXqlHLOsGKJ_G-_mQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 15:06:02
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 11:05:57.962343 2024] [security2:error] [pid 32417] [client 139.59.2.175:50831] [client 139.5 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 11:05:57.962343 2024] [security2:error] [pid 32417] [client 139.59.2.175:50831] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.naturephotographyadventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.naturephotographyadventures.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "Zh6T1YLIelZukGISbcseCwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 14:49:42
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 10:49:37.285764 2024] [security2:error] [pid 4043864] [client 139.59.2.175:49317] [client 139 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 10:49:37.285764 2024] [security2:error] [pid 4043864] [client 139.59.2.175:49317] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.taekwondoit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.taekwondoit.com"] [uri "/about-us/wp-json/wp/v2/users/"] [unique_id "Zh6QAcF5UB3cU_n57y6vDQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-04-16 12:55:24
UTC ·
(2 years ago)
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2024-04-16 12:16:56
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
weblite
2024-04-16 09:38:55
UTC ·
(2 years ago)
WP_XMLRPC_ABUSE
Brute-Force
Web App Attack
Anonymous
2024-04-16 08:01:03
UTC ·
(2 years ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 07:15:47
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 03:15:41.989894 2024] [security2:error] [pid 16858] [client 139.59.2.175:56345] [client 139.5 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 03:15:41.989894 2024] [security2:error] [pid 16858] [client 139.59.2.175:56345] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hempdoctorsusa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hempdoctorsusa.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zh4lnTba1SMbD53NY8pmMAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 06:40:39
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 02:40:31.438836 2024] [security2:error] [pid 18738] [client 139.59.2.175:50044] [client 139.5 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 02:40:31.438836 2024] [security2:error] [pid 18738] [client 139.59.2.175:50044] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harvestfrc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harvestfrc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zh4dX89VBs00FpObebFv-wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-04-16 06:34:36
UTC ·
(2 years ago)
(wordpress) Failed wordpress login from 139.59.2.175 (IN/India/Karnataka/Bengaluru/-/[redacted])
Brute-Force
🇺🇸
TPI-Abuse
2024-04-16 06:02:19
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 02:02:15.561748 2024] [security2:error] [pid 2501] [client 139.59.2.175:49548] [client 139.59 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 02:02:15.561748 2024] [security2:error] [pid 2501] [client 139.59.2.175:49548] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nickp.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nickp.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zh4UZy1VylfHrhFQf74P7wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-16 05:27:17
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 01:27:10.988597 2024] [security2:error] [pid 6913] [client 139.59.2.175:49851] [client 139.59 ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.2.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 16 01:27:10.988597 2024] [security2:error] [pid 6913] [client 139.59.2.175:49851] [client 139.59.2.175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donbronson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donbronson.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "Zh4MLiMqip9gG9Ybi5U6JwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack