|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 10 10:04:48.308886 2025] [security2:error] [pid 12185:tid 12185] [client 212.56.53.92:40413] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||theholleys.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theholleys.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aRH_EAv1k1C9N8RDkWBPAQAAAAs"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
|
|
🇩🇪
kjaerulff
|
|
Failed Wordpress login using xmlrpc.php
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 20:38:49.741981 2025] [security2:error] [pid 13443:tid 13443] [client 212.56.53.92:28059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advancedmotorsports.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advancedmotorsports.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRFCKfoNoaY6AzL-I_g4GgAAADQ"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 212.56.53.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 18:58:51.108515 2025] [security2:error] [pid 32410:tid 32410] [client 212.56.53.92:20452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jmms.mx|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jmms.mx"] [uri "/wp-json/wp/v2/users"] [unique_id "aREqu6nyrE-vpUyvH6GcxQAAAAY"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇷🇴
INTEQ
|
|
Brute force attack from 212.56.53.92
|
Brute-Force
|
|
|
🇺🇸
BSG Webmaster
|
|
Port scanning (Port 25565)
|
Port Scan
Hacking
|
|
|
🇺🇸
anon333
|
|
Hacker syslog review 1749130501
|
Hacking
|
|
|
🇺🇸
MPL
|
|
tcp/25565 (2 or more attempts)
|
Port Scan
|
|
|
🇳🇱
Study Bitcoin 🤗
|
|
Port probe to tcp/25565
[ros]
|
Port Scan
|
|
|
Anonymous
|
|
Unauthorized connection attempt
|
Port Scan
Hacking
Exploited Host
|
|
|
🇧🇷
SvrAdmin
|
|
[101] (smtpauth) Failed SMTP AUTH login from 212.56.53.92 (US/United States/-): 5 in the last 3600 s ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 212.56.53.92 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2025-05-30 11:23:15 dovecot_login authenticator failed for (DESKTOP-KDU93OO) [212.56.53.92]:49915: 535 Incorrect authentication data ([email protected])
2025-05-30 11:23:15 dovecot_login authenticator failed for (DESKTOP-KDU93OO) [212.56.53.92]:49913: 535 Incorrect authentication data ([email protected])
2025-05-30 11:23:15 dovecot_login authenticator failed for (DESKTOP-KDU93OO) [212.56.53.92]:49910: 535 Incorrect authentication data ([email protected])
2025-05-30 11:23:15 dovecot_login authenticator failed for (DESKTOP-KDU93OO) [212.56.53.92]:49912: 535 Incorrect authentication data ([email protected])
2025-05-30 11:23:15 dovecot_login authenticator failed for (DESKTOP-KDU93OO) [212.56.53.92]:49914: 535 Incorrect authentication data ([email protected])
show less
|
Port Scan
Hacking
Brute-Force
Exploited Host
|
|