🇫🇷
Max la Menace
2024-09-13 01:55:15
UTC ·
(2 years ago)
Wordpress attack (F)
Blog Spam
Web App Attack
🇫🇷
Max la Menace
2024-09-11 05:25:08
UTC ·
(2 years ago)
Wordpress attack (F)
Blog Spam
Web App Attack
🇺🇸
mawan
2024-09-09 19:04:20
UTC ·
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
TPI-Abuse
2024-09-04 19:11:03
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 15:10:54.894907 2024] [security2:error] [pid 20378:tid 20378] [client 2001:41d ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 15:10:54.894907 2024] [security2:error] [pid 20378:tid 20378] [client 2001:41d0:1008:1e04:::57036] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||josephshv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "josephshv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Ztiwvrw7tnSVB1Qbi4-DSAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-04 17:46:30
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 13:46:23.618986 2024] [security2:error] [pid 24617:tid 24617] [client 2001:41d ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 13:46:23.618986 2024] [security2:error] [pid 24617:tid 24617] [client 2001:41d0:1008:1e04:::49176] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ironsightsarmory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ironsightsarmory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Ztic73MBBbluRfQS3ZklIAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2024-08-28 11:08:42
UTC ·
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 20:25:41
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 16:25:34.529339 2024] [security2:error] [pid 6638:tid 6638] [client 2001:41d0: ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 16:25:34.529339 2024] [security2:error] [pid 6638:tid 6638] [client 2001:41d0:1008:1e04:::40244] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.usaenquirer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.usaenquirer.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zrpvvv9-xGra1OSzbneqeQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 20:08:19
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 16:08:14.971144 2024] [security2:error] [pid 2488045:tid 2488045] [client 2001 ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 16:08:14.971144 2024] [security2:error] [pid 2488045:tid 2488045] [client 2001:41d0:1008:1e04:::35410] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gerrytolentino.praemiumtech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gerrytolentino.praemiumtech.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zrprrta5KhUeuBB2l_qhRwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 19:41:01
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 15:40:54.895960 2024] [security2:error] [pid 30316:tid 30316] [client 2001:41d ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 15:40:54.895960 2024] [security2:error] [pid 30316:tid 30316] [client 2001:41d0:1008:1e04:::36952] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sancristobal-seniors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sancristobal-seniors.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrplRvIoBKVYj6t8RdPktAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 19:10:49
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 15:10:43.730739 2024] [security2:error] [pid 16285:tid 16311] [client 2001:41d ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 15:10:43.730739 2024] [security2:error] [pid 16285:tid 16311] [client 2001:41d0:1008:1e04:::50390] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gilesrentalcars.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilesrentalcars.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrpeMzKxxKnxGBsgkPd95gAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 18:45:06
UTC ·
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 14:44:59.378722 2024] [security2:error] [pid 1974:tid 1974] [client 2001:41d0: ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:1008:1e04:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 14:44:59.378722 2024] [security2:error] [pid 1974:tid 1974] [client 2001:41d0:1008:1e04:::36332] [client 2001:41d0:1008:1e04::] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.realclean.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.realclean.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZrpYKwmF8bBRnoi5-79lywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
ballibaba
2024-07-18 06:00:09
UTC ·
(2 years ago)
Detected WordPress Brute Force by Mumcular Honeypot.
Brute-Force
Web App Attack
🇺🇸
lavnet.net
2024-07-17 20:32:42
UTC ·
(2 years ago)
Jul 17 20:32:41 angela wordpress(thejunkymonkey.com)[517885]: Blocked authentication attempt for admin from 2001:41d0:1008:1e04::
...
Hacking
Web App Attack
🇩🇪
iNetWorker
2024-07-16 21:49:18
UTC ·
(2 years ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
lavnet.net
2024-07-16 18:48:40
UTC ·
(2 years ago)
Jul 16 18:48:39 angela wordpress(thejunkymonkey.com)[271748]: Blocked authentication attempt for admin from 2001:41d0:1008:1e04::
...
Hacking
Web App Attack