🇹🇷
rtbh.com.tr
2025-12-11 20:10:24
(5 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2025-12-11 19:56:00
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 14:55:57.011596 2025] [security2:error] [pid 29411:tid 29411] [client 162.241.253.21:51166] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||casaniagara.com.mx|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casaniagara.com.mx"] [uri "/wp-json/Wp/v2/users"] [unique_id "aTshzVoVEJ0auK-i6HKegAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 19:01:21
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 14:01:16.804155 2025] [security2:error] [pid 9903:tid 9903] [client 162.241.253.21:54708] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ixd.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ixd.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aTsU_MmKg3auI1GlmhytOwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 14:39:00
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 09:38:54.491360 2025] [security2:error] [pid 3066:tid 3066] [client 162.241.253.21:14828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ergocorrect.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ergocorrect.com"] [uri "/wp-json/Wp/v2/users"] [unique_id "aTrXflsyW745bA437zBYFQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 12:35:18
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 07:35:10.656700 2025] [security2:error] [pid 9139:tid 9139] [client 162.241.253.21:47916] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||brandoncomputergeeks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "brandoncomputergeeks.com"] [uri "/wp-json/wp/v2/users.json"] [unique_id "aTq6foo48ehlwlT4b_GoMQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 12:17:27
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 07:17:24.215000 2025] [security2:error] [pid 26686:tid 26830] [client 162.241.253.21:53752] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.clearwaterpumpservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clearwaterpumpservices.com"] [uri "/index.php/wp-json/wp/v2/users"] [unique_id "aTq2VM_9Z7RMjBZjEjU4QwAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2025-12-11 10:58:29
(5 months ago)
Attacking WordPress
162.241.253.21 - - [11/Dec/2025:11:58:25 +0100] "POST /xmlrpc.php HTTP/2.0" 503 ...
show more
Attacking WordPress
162.241.253.21 - - [11/Dec/2025:11:58:25 +0100] "POST /xmlrpc.php HTTP/2.0" 503 18947 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; GWX:QUALIFIED)"
show less
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2025-12-10 23:37:14
(5 months ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 22:47:05
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 162.241.253.21 (box5757.bluehost.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 17:47:00.706504 2025] [security2:error] [pid 18804:tid 18804] [client 162.241.253.21:14730] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.uphillfarmvt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.uphillfarmvt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTn4ZMqQKhQzUaqczeRUgAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2025-12-10 17:54:29
(5 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇹🇷
rtbh.com.tr
2025-11-12 20:09:52
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2025-11-11 23:32:32
(6 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-11-11 20:09:51
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇦🇺
weblite
2025-11-10 02:04:11
(6 months ago)
WP_XMLRPC_ABUSE WP_LOGIN_FAIL
Brute-Force
Web App Attack
🇺🇸
etu brutus
2025-11-10 02:03:57
(6 months ago)
162.241.253.21 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host