๐ฆ๐บ
weblite
2024-12-11 18:23:22
(1 year ago)
LONG_RUNNING WP_XMLRPC_ABUSE
Brute-Force
Web App Attack
๐บ๐ธ
mawan
2024-12-10 12:33:39
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
ghostwarriors
2024-12-10 00:20:06
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2024-12-10 00:14:25
(1 year ago)
2024/12/10 01:14:24 [error] 29665#316354: *1419888 access forbidden by rule, client: 2a02:4780:10:7a ...
show more
2024/12/10 01:14:24 [error] 29665#316354: *1419888 access forbidden by rule, client: 2a02:4780:10:7ae3::1, server: revolutionbim.com, request: "POST /xmlrpc.php HTTP/1.1", host: "revolutionbim.com"
...
show less
Web Spam
๐ธ๐ฌ
Cloudkul Cloudkul
2024-12-09 23:45:26
(1 year ago)
Multiple unauthorized attempts to access web resources
Brute-Force
Web App Attack
๐ฉ๐ช
corthorn
2024-12-08 08:25:55
(1 year ago)
2a02:4780:10:7ae3::1 - - [08/Dec/2024:09:25:54 +0100] "POST /xmlrpc.php HTTP/1.1" 403 4176 "-" "Mozi ...
show more
2a02:4780:10:7ae3::1 - - [08/Dec/2024:09:25:54 +0100] "POST /xmlrpc.php HTTP/1.1" 403 4176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
...
show less
Brute-Force
๐บ๐ธ
mawan
2024-12-07 17:20:50
(1 year ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
ghostwarriors
2024-12-07 15:20:12
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2024-12-07 15:08:34
(1 year ago)
2024/12/07 16:08:33 [error] 55843#115160: *744442 access forbidden by rule, client: 2a02:4780:10:7ae ...
show more
2024/12/07 16:08:33 [error] 55843#115160: *744442 access forbidden by rule, client: 2a02:4780:10:7ae3::1, server: revolutionbim.com, request: "POST /xmlrpc.php HTTP/1.1", host: "revolutionbim.com"
...
show less
Web Spam
๐บ๐ธ
TPI-Abuse
2024-12-06 00:49:35
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 19:49:29.855425 2024] [security2:error] [pid 3446:tid 3446] [client 2a02:4780:10:7ae3::1:35538] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||moversandshakers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "moversandshakers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1JKGdRXkVvFA-L-Zi6diwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-05 15:44:41
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 10:44:37.409382 2024] [security2:error] [pid 13741:tid 13741] [client 2a02:4780:10:7ae3::1:53000] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.enduratuff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.enduratuff.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1HKZa064Iy8kUiy5EB6jAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-05 14:09:52
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 09:09:48.449173 2024] [security2:error] [pid 9496:tid 9534] [client 2a02:4780:10:7ae3::1:46138] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maryschalkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maryschalkdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1G0LCvLzIJkChXApk1H1gAAAYk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-05 12:17:57
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 07:17:52.679334 2024] [security2:error] [pid 5848:tid 5848] [client 2a02:4780:10:7ae3::1:34096] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coolcustomweddingproducts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coolcustomweddingproducts.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1GZ8Ije7M4uVtEWp_eqawAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-05 04:57:37
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 04 23:57:31.085758 2024] [security2:error] [pid 4870:tid 4870] [client 2a02:4780:10:7ae3::1:38326] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.studiopilates.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.studiopilates.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z1Eyuwu0U6LmLfXDd7YxKgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-25 19:39:59
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:4780:10:7ae3::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 14:39:51.903731 2024] [security2:error] [pid 20999:tid 21003] [client 2a02:4780:10:7ae3::1:36284] [client 2a02:4780:10:7ae3::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kerrfamilyassociation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrfamilyassociation.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z0TSh5i_tKCIgOUuWc_19gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack