🇺🇸
TPI-Abuse
2023-12-17 22:31:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 17:31:03.449103 2023] [security2:error] [pid 12214] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:54942] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blog.mosherpit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blog.mosherpit.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX92p7LIvsu9mb7N2BhBSgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2023-12-17 22:20:59
(2 years ago)
Wordpress login attempts
Brute-Force
🇺🇸
TPI-Abuse
2023-12-17 21:42:57
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 16:42:51.349240 2023] [security2:error] [pid 5957] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:33524] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||climasyequipos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "climasyequipos.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9rW3oaAZ4_k0so8hYh9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 21:18:59
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 16:18:52.574265 2023] [security2:error] [pid 26880] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:34406] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||papuakonservasi.papuabirdclub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "papuakonservasi.papuabirdclub.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9lvAejftSpoTSlJwPTggAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 20:49:18
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 15:49:14.053569 2023] [security2:error] [pid 10802] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:59916] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mixmediallc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mixmediallc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9eyuGT9Ueun6jciHS0QwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 20:17:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 15:17:02.428078 2023] [security2:error] [pid 9633] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:49480] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mobiletitleclerk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mobiletitleclerk.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9XPj_DMeuyr-cvKIpixAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 16:41:00
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 11:40:53.881874 2023] [security2:error] [pid 5843] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:59770] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abeltours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abeltours.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX8klVPkjtjzXULa9HvowQAAAAE"], referer: http://abeltours.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2023-12-17 13:23:42
(2 years ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2402:800:63b7:8337:7919:bbbf:75a:fab ( ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2402:800:63b7:8337:7919:bbbf:75a:fab (-)
show less
Brute-Force
🇺🇸
TPI-Abuse
2023-12-17 12:47:24
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 07:47:19.398495 2023] [security2:error] [pid 29157] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:45102] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realcountrykixfm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realcountrykixfm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX7t1w2sjgfqRguPozJr-gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 11:57:36
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 06:57:32.192679 2023] [security2:error] [pid 21992] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:36146] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||parastesh.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "parastesh.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX7iLKFuoOsFIZeYJ8TtQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 10:49:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 05:49:01.984066 2023] [security2:error] [pid 3054] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:39156] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||obss.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "obss.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX7SHT7i5sem9L6uws0kdAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WebWizards.NZ
2023-12-17 10:33:07
(2 years ago)
Trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 07:17:24
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 02:17:16.498668 2023] [security2:error] [pid 28837:tid 46954283312896] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:44050] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||krisclick.imaginateca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "krisclick.imaginateca.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX6gfAyNhlfOmk7_d-laTwAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 06:16:55
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 01:16:52.998113 2023] [security2:error] [pid 4255] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:43696] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.illumoonatedtarot.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.illumoonatedtarot.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX6SVCOJU2TmLg2BZ4mlkQAAABA"], referer: http://mail.illumoonatedtarot.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 04:56:15
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2402:800:63b7:8337:7919:bbbf:75a:fab (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 23:56:08.096945 2023] [security2:error] [pid 18475] [client 2402:800:63b7:8337:7919:bbbf:75a:fab:39406] [client 2402:800:63b7:8337:7919:bbbf:75a:fab] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.cassandramarisalon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.cassandramarisalon.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX5_aKsn4vfDCgxQmlDa2QAAAAA"], referer: http://mail.cassandramarisalon.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack