🇦🇺
MAGIC
2024-12-14 22:03:48
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇮
JimArchon72
2024-12-03 15:20:01
(1 year ago)
2024/12/03 15:16:53 "GET /wp-login.php HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2024-12-01 13:38:26
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 08:38:18.179401 2024] [security2:error] [pid 3500:tid 3500] [client 181.212.92.49:34957] [client 181.212.92.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.midway-island.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.midway-island.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Z0xmyky-1fTo0fB8pnxiGwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2024-11-26 15:45:28
(1 year ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: www.elhacker.net userAgent: Mozilla/ ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Action: managed_challenge Source: firewallManaged ASN Description: CTC. CORP S.A. TELEFONICA EMPRESAS Country: CL Method: GET Timestamp: 2024-11-26T15:45:28Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2024-11-16 23:27:32
(1 year ago)
Malicious activity detected
Hacking
Web App Attack
🇬🇧
Steve
2024-11-01 12:58:08
(1 year ago)
Attempts against non-existent wordpress site
Brute-Force
Web App Attack
🇩🇪
mxbl
2024-10-23 23:28:20
(1 year ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2024-09-11 12:09:02
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 08:08:53.900861 2024] [security2:error] [pid 6104:tid 6104] [client 181.212.92.49:14107] [client 181.212.92.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mounthoodhistory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mounthoodhistory.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZuGIVc-vfuJulHSOkCWLUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-09-07 20:00:04
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-09-07 01:23:40
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 06 21:23:34.751919 2024] [security2:error] [pid 23493:tid 23493] [client 181.212.92.49:10891] [client 181.212.92.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.newdirectionsinmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZturFlV3-aOlGgDqixFyOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
danskefilm.dk
2024-08-03 15:30:01
(2 years ago)
wordpress login attempts
Web App Attack
🇳🇿
Tripwire
2024-06-25 16:44:25
(2 years ago)
Wordpress login scanning
Brute-Force
Web App Attack
🇩🇪
Trueforce Threat Report
2024-06-18 21:03:21
(2 years ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-10 15:57:02
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 10 11:56:55.040087 2024] [security2:error] [pid 2758842] [client 181.212.92.49:41419] [client 181.212.92.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.takemehomedogrescue.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.takemehomedogrescue.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZmciRydx5T2lgc6yYQcewgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-04 18:33:14
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 181.212.92.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 14:33:05.879184 2024] [security2:error] [pid 2871] [client 181.212.92.49:31170] [client 181.212.92.49] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.secondskinagency.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.secondskinagency.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zl9d4cCu2R-R3lN3JEMREgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack