🇺🇸
TPI-Abuse
2025-05-30 12:57:33
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 08:57:25.793373 2025] [security2:error] [pid 414237:tid 414237] [client 141.95.34.230:33786] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||deborahbein.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "deborahbein.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aDmrNczEQXm-VwtEOoPFyQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2025-05-30 09:32:16
(1 year ago)
Wordpress_xmlrpc_attack
Bad Web Bot
🇩🇪
LRob.fr
2025-05-30 09:30:34
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2025-05-30 09:12:16
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-05-30 09:11:56
(1 year ago)
(wordpress) Failed wordpress login from 141.95.34.230 (FR/France/lim110.truehost.cloud)
Brute-Force
🇩🇪
Ba-Yu
2025-05-30 08:56:59
(1 year ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-05-19 21:56:35
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 19 17:56:29.331540 2025] [security2:error] [pid 2165706:tid 2165813] [client 141.95.34.230:39458] [client 141.95.34.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aclarityforensics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aclarityforensics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCupDTUhrDnMtH_RXTMgTAAAAhY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-19 19:08:14
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 19 15:08:07.679467 2025] [security2:error] [pid 1771534:tid 1771534] [client 141.95.34.230:35998] [client 141.95.34.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.otraes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.otraes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCuBl00arsXgQ4OC4SlkOwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-17 00:06:09
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-04-16 16:40:39
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 141.95.34.230 (lim110.truehost.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 12:40:33.119281 2025] [security2:error] [pid 2754:tid 2770] [client 141.95.34.230:55866] [client 141.95.34.230] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vinylnotespodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z__dgQzTvhTazxNlGmvhkAAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-11 20:32:47
(1 year ago)
XMLRPC Hack Attempts
Hacking
Brute-Force
🇩🇰
wnbhosting.dk
2024-12-12 11:42:55
(1 year ago)
WP xmlrpc [2024-12-12T12:42:55+01:00]
Hacking
Web App Attack
🇬🇧
Swiptly
2024-12-12 01:52:02
(1 year ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
2024-12-11 17:58:21
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇰
wnbhosting.dk
2024-12-11 00:00:31
(1 year ago)
WP xmlrpc [2024-12-11T01:00:31+01:00]
Hacking
Web App Attack