🇫🇷
Max la Menace
2023-12-22 07:41:59
(2 years ago)
Wordpress attack (F)
Blog Spam
Web App Attack
🇩🇪
karger
2023-12-22 04:28:03
(2 years ago)
Wordpress attack - hard filter
Brute-Force
Web App Attack
🇩🇪
Hazzard
2023-12-22 03:41:09
(2 years ago)
(wordpress) Failed wordpress login from 2a01:4f9:1a:a095::2 (DE/Germany/-/-/-/[redacted]): (CF_ENAB ...
show more
(wordpress) Failed wordpress login from 2a01:4f9:1a:a095::2 (DE/Germany/-/-/-/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇦🇺
MAGIC
2023-12-21 14:10:32
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2023-12-18 07:55:26
(2 years ago)
suspicious query, try to find admin area log:/admin/
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 03:09:10
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 22:09:04.674653 2023] [security2:error] [pid 11388] [client 2a01:4f9:1a:a095::2:36762] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cornerstonecharitablescholarshiptrust.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cornerstonecharitablescholarshiptrust.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-30ALuNGcA0q594-ZShgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 02:21:48
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 21:21:43.491381 2023] [security2:error] [pid 8664] [client 2a01:4f9:1a:a095::2:40028] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blackbookofthemastermind.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blackbookofthemastermind.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-st_zlCE1AS7e6gTnhvwAAAA8"], referer: http://startuppeople.us///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 01:51:37
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 20:51:34.247022 2023] [security2:error] [pid 2500] [client 2a01:4f9:1a:a095::2:38242] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||applemaccomputerconsulting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "applemaccomputerconsulting.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-lpgFuDSgv4WRLt-w8XwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-18 00:01:28
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 19:01:26.383443 2023] [security2:error] [pid 16214] [client 2a01:4f9:1a:a095::2:58444] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paleopathologist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paleopathologist.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-L1lhzjI93nS6OmuYeIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 23:41:15
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 18:41:11.549452 2023] [security2:error] [pid 13575] [client 2a01:4f9:1a:a095::2:52460] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pcga.golf|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pcga.golf"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-HF3UyFi5r3DHoJxi7igAAAAw"], referer: http://tradingcardgolfassociation.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 23:12:07
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 18:11:59.413699 2023] [security2:error] [pid 28928] [client 2a01:4f9:1a:a095::2:58766] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bluemarineboats.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bluemarineboats.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX-AP03Rv-XB95AxFy0oxwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2023-12-17 22:42:18
(2 years ago)
Blocked user enumeration attempt
Hacking
🇺🇸
TPI-Abuse
2023-12-17 22:00:28
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 17:00:22.386930 2023] [security2:error] [pid 26414] [client 2a01:4f9:1a:a095::2:55678] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lcoor.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lcoor.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9vdlpuz1KerHfvUPZB2gAAAA4"], referer: http://ourredeemeroxnard.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 21:44:04
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 16:43:57.804015 2023] [security2:error] [pid 3427] [client 2a01:4f9:1a:a095::2:39702] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fiasdesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fiasdesigns.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9rnUhB_1J-kVVIb-p9fwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 21:14:38
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:4f9:1a:a095::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 16:14:34.306854 2023] [security2:error] [pid 13784] [client 2a01:4f9:1a:a095::2:34954] [client 2a01:4f9:1a:a095::2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||angelabcomics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "angelabcomics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZX9kuushjxzMwMuwPXi9wwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack