|
๐ฉ๐ช
haquemdmanzurul
|
|
WordPress authentication detection: username_enumeration; 1 attempts in configured detection window. Detected at 2026-10-19 10:01:54 UTC.
|
Brute-Force
Web App Attack
|
|
๐ฎ๐ช
AutosOnShow
|
|
blocked for webapp attack | path requested: /.env | seen at 2026-10-17 05:52:34.953 |
|
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:45:48.832894 2026] [security2:error] [pid 28049:tid 28049] [client 195.63.26.13:33476] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:45:48.832894 2026] [security2:error] [pid 28049:tid 28049] [client 195.63.26.13:33476] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yuichiro.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yuichiro.us"] [uri "/wp-login.php"] [unique_id "atDK_EiFnS-m3dVG4MNySgAAAAo"], referer: http://yuichiro.us/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
LRob
|
|
WordPress probing | req: /wp-login.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
|
Brute-Force
Web App Attack
|
|
๐จ๐ญ
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
|
๐ฉ๐ช
Reinhard
|
|
Parameter or path manipulation, hacking. /.env
|
Hacking
|
|
๐ซ๐ฎ
JimArchon72
|
|
2026/06/29 15:12:44 "GET /wp-login.php HTTP/1.1"
|
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 10:34:48.670511 2026] [security2:error] [pid 4003:tid 4003] [client 195.63.26.13:15516] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 10:34:48.670511 2026] [security2:error] [pid 4003:tid 4003] [client 195.63.26.13:15516] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mfleetservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mfleetservice.com"] [uri "/wp-login.php"] [unique_id "abF9iEi5B8IL4L1Ug3JgPAAAAAA"], referer: http://mfleetservice.com/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 20:19:04.022356 2026] [security2:error] [pid 32361:tid 32361] [client 195.63.26.13:47048] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.26.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 20:19:04.022356 2026] [security2:error] [pid 32361:tid 32361] [client 195.63.26.13:47048] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jolankagroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jolankagroup.com"] [uri "/wp-login.php"] [unique_id "aaY3CDr_geP1zJy9n4E-RwAAAAc"], referer: http://jolankagroup.com/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|