🇹🇷
rtbh.com.tr
2025-10-12 20:09:19
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-10-12 00:09:18
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-10-11 20:09:18
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
bigwavedave
2025-10-11 00:24:14
(8 months ago)
Wordpress Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 23:56:09
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 19:56:06.239643 2025] [security2:error] [pid 18832:tid 18832] [client 157.230.252.135:52612] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.computerpartsrecovery.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.computerpartsrecovery.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOmdFqv4bzeP3ZNpLuiVwQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2025-10-10 23:30:20
(8 months ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 23:26:48
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 19:26:44.277983 2025] [security2:error] [pid 24064:tid 24064] [client 157.230.252.135:50972] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kerrywood.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOmWNIM65eWeKVqOYe6GgQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 22:07:20
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 18:07:17.277425 2025] [security2:error] [pid 3717:tid 3717] [client 157.230.252.135:57267] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.birdlovesfish.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.birdlovesfish.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOmDlZwPCpVppXmkKzWtEwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-10 22:01:33
(8 months ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/ ...
show more
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //wp-json/wp/v2/users/ HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 19:15:37
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 15:15:32.173613 2025] [security2:error] [pid 15567:tid 15588] [client 157.230.252.135:58345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cocoonprojects.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cocoonprojects.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOlbVGZmzBTmojOYlU6p8gAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-10-10 19:10:09
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-10-10 19:05:15
(8 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇪🇸
masterguru
2025-10-10 19:04:58
(8 months ago)
WordPress: User enumeration. Pattern match "(author\\\\= (1000-123)
Web App Attack
🇨🇭
backslash
2025-10-10 18:55:12
(8 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-10-10 18:48:28
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.230.252.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 14:48:25.413833 2025] [security2:error] [pid 14214:tid 14236] [client 157.230.252.135:50555] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coasterdvdsonline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coasterdvdsonline.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aOlU-TAF29Pz6DtCNtSVOwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack