🇺🇸
TPI-Abuse
2023-11-16 18:04:36
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 13:04:29.537259 2023] [security2:error] [pid 27894] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf:36252] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVZZrchh8nwwW1HNzuyYbQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 17:48:35
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 12:48:31.386379 2023] [security2:error] [pid 5623] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf:37214] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mainefirst.arsenaultartistmanagement.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mainefirst.arsenaultartistmanagement.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVZV7yD7Q2DvBQWF5ZxzeQAAAA4"], referer: http://mainefirst.arsenaultartistmanagement.com///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:51:31
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:51:25.195967 2023] [security2:error] [pid 24411:tid 46916167898880] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf:53130] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gochemless.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gochemless.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYQTXhqF2Dbi1GPjaHSkAAAAQk"], referer: http://gochemless.net///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:29:36
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:29:33.576066 2023] [security2:error] [pid 1515] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf:36914] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jerielster.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jerielster.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYLLQQMpaQ5cCMejWwH7AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:07:51
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): ...
show more
(mod_security) mod_security (id:225170) triggered by 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:07:48.186097 2023] [security2:error] [pid 13493] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf:58878] [client 2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||memorialcityresidences.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "memorialcityresidences.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYGFITYOIVx64GhYc4dmgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mawan
2023-11-07 05:52:04
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇦🇺
MAGIC
2023-10-08 05:00:33
(3 years ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
mawan
2023-10-06 20:38:27
(3 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇦🇺
MAGIC
2023-10-05 08:00:29
(3 years ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
corthorn
2023-09-21 17:03:05
(3 years ago)
2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf - - [21/Sep/2023:19:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 ...
show more
2a01:7c8:aaca:1cf:5054:ff:fecd:f8bf - - [21/Sep/2023:19:03:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5557 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
...
show less
Brute-Force
🇦🇺
MAGIC
2023-09-21 03:07:19
(3 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
mawan
2023-09-13 03:08:09
(3 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇩🇪
Ba-Yu
2023-09-07 19:45:12
(3 years ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack