๐บ๐ธ
TPI-Abuse
2024-02-03 23:19:21
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 03 18:19:18.029208 2024] [security2:error] [pid 10300] [client 167.71.196.193:54286] [client 167.71.196.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zb7J9qiEiuP126VR04Tx1QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-03 22:39:52
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 03 17:39:47.976536 2024] [security2:error] [pid 13924] [client 167.71.196.193:59110] [client 167.71.196.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ixd.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ixd.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zb7As2RllEJyNAy4qs8FygAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Apache
2024-02-03 22:19:12
(2 years ago)
(mod_security) mod_security (id:210410) triggered by 167.71.196.193 (SG/Singapore/-): 5 in the last ...
show more
(mod_security) mod_security (id:210410) triggered by 167.71.196.193 (SG/Singapore/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Ba-Yu
2024-02-03 21:59:53
(2 years ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-03 21:53:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 03 16:52:59.630890 2024] [security2:error] [pid 9758] [client 167.71.196.193:53808] [client 167.71.196.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anegadabeachclub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anegadabeachclub.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zb61uzugpX9QIdG2TyYeIgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Tripwire
2024-02-03 21:05:03
(2 years ago)
Scanning for exploits - //wp-includes/wlwmanifest.xml
Web App Attack
๐ง๐ช
taivas.nl
2024-02-03 21:02:12
(2 years ago)
Bad_requests
Bad Web Bot
๐ฉ๐ช
ps-center
2024-02-03 20:00:37
(2 years ago)
C1: Web Attack GET /kinderbuch/pixi/wp-includes/wlwmanifest.xml
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Kenshin869
2024-02-03 19:36:29
(2 years ago)
Wordpress unauthorized access attempt
Brute-Force
๐บ๐ธ
RidgeStar
2024-02-03 19:34:44
(2 years ago)
2024-02-03T11:34:44-08:00: http://nsysasoccer.org/wp/wp-includes/wlwmanifest.xml
2024-02-03T11:34:43 ...
show more
2024-02-03T11:34:44-08:00: http://nsysasoccer.org/wp/wp-includes/wlwmanifest.xml
2024-02-03T11:34:43-08:00: http://nsysasoccer.org/blog/wp-includes/wlwmanifest.xml
2024-02-03T11:34:43-08:00: http://nsysasoccer.org/web/wp-includes/wlwmanifest.xml
2024-02-03T11:34:43-08:00: http://nsysasoccer.org/wordpress/wp-includes/wlwmanifest.xml
2024-02-03T11:34:42-08:00: http://nsysasoccer.org/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
๐จ๐ญ
zynex
2024-02-03 19:34:27
(2 years ago)
URL Probing: /2019/wp-includes/wlwmanifest.xml
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-03 18:12:42
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 167.71.196.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 03 13:12:38.059600 2024] [security2:error] [pid 8117] [client 167.71.196.193:60627] [client 167.71.196.193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pastortimsjourney.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pastortimsjourney.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zb6CFvJuFbwdMKigbqVYuQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Block_Steady_Crew
2023-10-04 08:40:26
(3 years ago)
Honeypot snared from 167.71.196.193
Port Scan
Web App Attack
Anonymous
2023-09-29 19:32:13
(3 years ago)
fail2ban apache-modsecurity [msg "Request Missing an Accept Header"] [uri "/api/sonicos/auth"]
Web App Attack
๐บ๐ธ
MPL
2023-09-28 06:46:14
(3 years ago)
tcp/4444
Port Scan