🇺🇸
TPI-Abuse
2023-12-17 14:35:01
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 09:34:56.129585 2023] [security2:error] [pid 26311] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:35832] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||miroddi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "miroddi.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX8HEFRfMeT21T0ggNlTUAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 13:17:46
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 08:17:38.410671 2023] [security2:error] [pid 10791] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:45076] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||7bsuperfruit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "7bsuperfruit.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX708uRiKk8pjsrXjmtLsAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 13:00:56
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 08:00:48.967746 2023] [security2:error] [pid 20531] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:36000] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||christianconsulting.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "christianconsulting.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX7xANXj33iQw1iFoTRbWwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2023-12-17 10:08:15
(2 years ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 09:44:00
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 04:43:55.507115 2023] [security2:error] [pid 16146] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:56010] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jfexpressfr8.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jfexpressfr8.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX7C2ziN2yzAZ_-mo5rGOwAAAA4"], referer: http://hotshotfr8.us///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 09:28:35
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 04:28:31.909497 2023] [security2:error] [pid 22392] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:42340] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ahomeinthecountry.fishpondmanagement.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ahomeinthecountry.fishpondmanagement.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX6_PwWMZJhn2_ZWUxAXCgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 07:08:20
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 02:08:14.685903 2023] [security2:error] [pid 27308] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:54250] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nextstepspersonalfinance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nextstepspersonalfinance.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX6eXl-Nu9rC2F3VDahZ2AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 04:54:39
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 23:54:35.589088 2023] [security2:error] [pid 28836:tid 46954166974208] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:50052] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.koalacogs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.koalacogs.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX5_C7etyOgTeyzIaii-5QAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 04:03:56
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 23:03:48.587706 2023] [security2:error] [pid 16461] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:54628] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ontimelogistiks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ontimelogistiks.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX5zJNsY654JdyrY3AU-igAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 01:46:31
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5- ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (0a418ad5-9837-4595-87cc-f11a5aeaa758.fr-par-2.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 20:46:25.884016 2023] [security2:error] [pid 32745] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:40864] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bzbdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bzbdesigns.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX5S8QO9QNP8SQJaJ0HETwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-16 22:09:59
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 17:09:52.585018 2023] [security2:error] [pid 19445] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:35268] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kyws-lp.webserviceswest.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kyws-lp.webserviceswest.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX4gMHciJ2djXfbvY-HAIAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-15 11:19:22
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 15 06:19:16.504285 2023] [security2:error] [pid 23751] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:54636] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anus.deubellzebub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anus.deubellzebub.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZXw2NJf5pTAAiPTIAwBTAQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-15 10:16:13
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 15 05:16:10.296621 2023] [security2:error] [pid 16428] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7:39146] [client 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pcga.golf|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pcga.golf"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZXwnaiVBuiclHTrD3e3-cAAAAAA"], referer: http://tradingcardgolfassociation.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2023-12-06 16:25:27
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇩🇪
Hazzard
2023-12-06 14:20:28
(2 years ago)
(wordpress) Failed wordpress login from 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (FR/France/-/-/-/[redac ...
show more
(wordpress) Failed wordpress login from 2001:bc8:1201:20:d6ae:52ff:fecc:1bf7 (FR/France/-/-/-/[redacted]): (CF_ENABLE)
show less
Brute-Force