🇳🇱
maxxsense
2024-01-20 12:14:54
(2 years ago)
(wordpress) Failed wordpress login from 2600:3c01::f03c:93ff:fe6d:2ebe (US/United States/-)
Brute-Force
2024-01-19 12:41:30
(2 years ago)
www.xn--netzfundstckderwoche-yec.de 2600:3c01::f03c:93ff:fe6d:2ebe [19/Jan/2024:13:41:21 +0100] "POS ...
show more
www.xn--netzfundstckderwoche-yec.de 2600:3c01::f03c:93ff:fe6d:2ebe [19/Jan/2024:13:41:21 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5889 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
www.xn--netzfundstckderwoche-yec.de 2600:3c01::f03c:93ff:fe6d:2ebe [19/Jan/2024:13:41:30 +0100] "POST /xmlrpc.php HTTP/1.1" 200 5889 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/38.0"
show less
Web App Attack
🇳🇱
maxxsense
2024-01-19 11:21:59
(2 years ago)
(wordpress) Failed wordpress login from 2600:3c01::f03c:93ff:fe6d:2ebe (US/United States/-)
Brute-Force
🇬🇧
BRHosting
2024-01-19 07:53:03
(2 years ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇬🇧
BRHosting
2024-01-18 07:33:03
(2 years ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇳🇱
maxxsense
2024-01-18 03:59:09
(2 years ago)
(wordpress) Failed wordpress login from 2600:3c01::f03c:93ff:fe6d:2ebe (US/United States/-)
Brute-Force
🇺🇸
myagent.site
2024-01-17 17:00:57
(2 years ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇩🇪
spam.must.die
2024-01-16 02:44:56
(2 years ago)
IP triggered category <category>
Web App Attack
🇩🇪
DEV-DNS
2024-01-15 21:44:24
(2 years ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2600:3c01::f03c:93ff:fe6d:2ebe (Unknow ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown)
show less
Brute-Force
🇺🇸
myagent.site
2024-01-15 20:10:26
(2 years ago)
Blocked user enumeration attempt
Hacking
🇺🇸
TPI-Abuse
2024-01-15 12:29:33
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 07:29:27.518207 2024] [security2:error] [pid 17729] [client 2600:3c01::f03c:93ff:fe6d:2ebe:50298] [client 2600:3c01::f03c:93ff:fe6d:2ebe] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.integrabroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.integrabroadcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaUlJ0vVzJdGMLNxggpOiwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-15 11:30:34
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 06:30:25.897998 2024] [security2:error] [pid 2863] [client 2600:3c01::f03c:93ff:fe6d:2ebe:50308] [client 2600:3c01::f03c:93ff:fe6d:2ebe] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newdirectionsinmusic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newdirectionsinmusic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaUXUdR1jLpv2ViNAWZ5mgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-15 10:48:09
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 05:48:02.863556 2024] [security2:error] [pid 26521] [client 2600:3c01::f03c:93ff:fe6d:2ebe:36528] [client 2600:3c01::f03c:93ff:fe6d:2ebe] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||onlinedigitalsuperstore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "onlinedigitalsuperstore.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaUNYkSeMGLX9zKuCuxJsgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-15 09:19:03
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 04:18:57.769782 2024] [security2:error] [pid 28722] [client 2600:3c01::f03c:93ff:fe6d:2ebe:58874] [client 2600:3c01::f03c:93ff:fe6d:2ebe] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mhsalumnifoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mhsalumnifoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaT4gf32UBxFSGzn2pi5mAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-14 16:12:08
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 2600:3c01::f03c:93ff:fe6d:2ebe (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 14 11:12:03.714704 2024] [security2:error] [pid 6390] [client 2600:3c01::f03c:93ff:fe6d:2ebe:33836] [client 2600:3c01::f03c:93ff:fe6d:2ebe] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||manaplas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZaQH037wuIkIY7SpVvm-ZwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack