axllent
2024-11-02 09:28:05
(14 hours ago)
Wordpress login scanning
Brute-Force
Web App Attack
MAGIC
2024-10-25 11:03:48
(1 week ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Boxis.net NOC
2024-10-17 07:01:43
(2 weeks ago)
(wordpress_login) WordPress Login Attack 197.232.151.118 (-): 3 in the last 3600 secs; Ports: *; Dir ... show more (wordpress_login) WordPress Login Attack 197.232.151.118 (-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 197.232.151.118 - - [17/Oct/2024:09:01:37 +0200] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
197.232.151.118 - - [17/Oct/2024:09:01:37 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
197.232.151.118 - - [17/Oct/2024:09:01:37 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less
Port Scan
MAGIC
2024-10-14 15:02:14
(2 weeks ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Bytemark
2024-10-09 09:33:15
(3 weeks ago)
197.232.151.118 - - [09/Oct/2024:10:33:14 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5. ... show more 197.232.151.118 - - [09/Oct/2024:10:33:14 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
197.232.151.118 - - [09/Oct/2024:10:33:14 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
197.232.151.118 - - [09/Oct/2024:10:33:14 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" show less
Brute-Force
Web App Attack
Anonymous
2024-09-26 06:51:04
(1 month ago)
Brute forcing Wordpress login
Hacking
Web App Attack
Steve
2024-09-25 10:20:06
(1 month ago)
Attempts against non-existent wordpress site
Brute-Force
Web App Attack
botreporter
2024-09-18 15:11:44
(1 month ago)
CMS vulnerability/installation scanning
Brute-Force
Web App Attack
MAGIC
2024-09-18 07:06:00
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Ba-Yu
2024-09-17 14:38:06
(1 month ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
Anonymous
2024-09-14 05:50:00
(1 month ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
TPI-Abuse
2024-09-13 08:46:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 197.232.151.118 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 197.232.151.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 13 04:46:14.518620 2024] [security2:error] [pid 16357:tid 16489] [client 197.232.151.118:64976] [client 197.232.151.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.guitarprimer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.guitarprimer.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZuP71uj-BPojUbDbB35GEgAAAoM"] show less
Brute-Force
Bad Web Bot
Web App Attack
Hirte
2024-08-28 08:41:31
(2 months ago)
MYH: Web Attack GET /wp-login.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
MAGIC
2024-08-27 08:19:17
(2 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
TPI-Abuse
2024-08-22 09:18:26
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 197.232.151.118 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 197.232.151.118 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 05:18:18.872813 2024] [security2:error] [pid 26434:tid 26434] [client 197.232.151.118:60922] [client 197.232.151.118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.newdirectionsinmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZscCWqbBZNTVLfQ6em2RTwAAAAA"] show less
Brute-Force
Bad Web Bot
Web App Attack