🇺🇸
myagent.site
2023-11-20 10:38:44
(2 years ago)
Banned for posting to wp-login.php without referer {"log":"agent-1169932","pwd":"agent-1169932","wp- ...
show more
Banned for posting to wp-login.php without referer {"log":"agent-1169932","pwd":"agent-1169932","wp-submit":"Log In","redirect_to":"http:\/\/jules-riosrealty.com\/wp-admin\/","testcookie":"1"}
show less
Hacking
🇺🇸
TPI-Abuse
2023-11-18 07:57:55
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 18 02:57:51.513115 2023] [security2:error] [pid 32323] [client 2a01:4f8:1c1e:a04e::1:56412] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||serranoscoffee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "serranoscoffee.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVhuf6Fb-BdcO9DaTptkBQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
maxxsense
2023-11-18 07:37:23
(2 years ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2a01:4f8:1c1e:a04e::1 (DE/Germany/-)
Brute-Force
🇺🇸
TPI-Abuse
2023-11-18 07:29:59
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 18 02:29:52.649606 2023] [security2:error] [pid 4207] [client 2a01:4f8:1c1e:a04e::1:52250] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sebog.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sebog.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVhn8JBi34ijajlz2qs_ZAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-17 16:04:25
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 17 11:04:19.011878 2023] [security2:error] [pid 30860] [client 2a01:4f8:1c1e:a04e::1:40874] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greatchristianadventure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greatchristianadventure.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVePA9qs4OyESHEqRhFF7gAAAAs"], referer: http://woodington.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-17 15:46:57
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 17 10:46:50.242344 2023] [security2:error] [pid 12944] [client 2a01:4f8:1c1e:a04e::1:52170] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.tenmenband.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.tenmenband.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVeK6jGZtcTOXwtcPd96ygAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 17:48:24
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 12:48:18.486036 2023] [security2:error] [pid 13370] [client 2a01:4f8:1c1e:a04e::1:60224] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.wave94.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.wave94.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVZV4nM_g_V3jGt5qpvcpgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
maxxsense
2023-11-16 17:46:47
(2 years ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 2a01:4f8:1c1e:a04e::1 (DE/Germany/-)
Brute-Force
🇺🇸
TPI-Abuse
2023-11-16 13:02:00
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 08:01:54.325375 2023] [security2:error] [pid 23734] [client 2a01:4f8:1c1e:a04e::1:58432] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firejasstrio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firejasstrio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYSwuCwmprSX-momXOAgQAAABk"], referer: http://firejazztrio.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:46:05
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:46:00.700591 2023] [security2:error] [pid 13674:tid 47333996529408] [client 2a01:4f8:1c1e:a04e::1:58772] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||spiritofaremma.theyogicat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "spiritofaremma.theyogicat.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYPCNOl___XnFcYZ8EyZQAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:29:44
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:29:39.092465 2023] [security2:error] [pid 2806] [client 2a01:4f8:1c1e:a04e::1:33792] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.starvationacres.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.starvationacres.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYLM7XFvVrbfRqM0URJZAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:09:38
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f8:1c1e:a04e::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:09:31.273185 2023] [security2:error] [pid 22572] [client 2a01:4f8:1c1e:a04e::1:49228] [client 2a01:4f8:1c1e:a04e::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||doublenaughtspycar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "doublenaughtspycar.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYGe-T2aWvepBWQr-i2CwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2023-10-28 23:19:37
(2 years ago)
2023-10-29T01:19:36.692986+02:00 ipoac.nl wordpress(5fm.nu)[1328080]: Authentication failure for adm ...
show more
2023-10-29T01:19:36.692986+02:00 ipoac.nl wordpress(5fm.nu)[1328080]: Authentication failure for admin from 2a01:4f8:1c1e:a04e::1
show less
Web App Attack
🇳🇱
maxxsense
2023-10-28 13:10:14
(2 years ago)
(wordpress) Failed wordpress login from 2a01:4f8:1c1e:a04e::1 (DE/Germany/-)
Brute-Force
🇦🇺
weblite
2023-10-28 10:10:48
(2 years ago)
WP_LOGIN_FAIL WP_XMLRPC_ABUSE
Brute-Force
Web App Attack