🇺🇸
TPI-Abuse
2024-08-30 13:29:22
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 09:29:14.359099 2024] [security2:error] [pid 1659934:tid 1660053] [client 2a02:c207:2048:9276::1:52932] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||honeyled.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "honeyled.com"] [uri "/dump.sql"] [unique_id "ZtHJKvSZMSoTPoklb6TrnwAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DEV-DNS
2024-08-01 21:39:47
(2 years ago)
(php-url-fopen) Failed php-url-fopen trigger from 2a02:c207:2048:9276::1 (vmi489276.contaboserver.ne ...
show more
(php-url-fopen) Failed php-url-fopen trigger from 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net)
show less
Web App Attack
2024-04-23 00:10:27
(2 years ago)
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ...
show more
Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
show less
Brute-Force
SSH
🇺🇸
WebWizards.NZ
2024-03-25 15:12:55
(2 years ago)
Trolling for resource vulnerabilities
Web App Attack
🇺🇸
WebWizards.NZ
2024-03-05 01:39:24
(2 years ago)
Trolling for resource vulnerabilities
Web App Attack
🇩🇪
MarkGGN
2024-02-28 04:21:11
(2 years ago)
Wordpress related. [1709094069] [0] [*] [#5892791] [0] [2] [2a02:c207:2048:9276::1] [403] [GET] [/in ...
show more
Wordpress related. [1709094069] [0] [*] [#5892791] [0] [2] [2a02:c207:2048:9276::1] [403] [GET] [/index.php] [WordPress: Blocked access to the WP REST API] [hex:2f77702d6a736f6e]
[1709094070] [0] [*] [#6158951] [0] [2] [2a02:c207:2048:9276::1] [403] [POST] [/index.php] [WordPress: Blocked access to the WP REST API] [hex:2f77702d6a736f6e2f6c69746573706565642f76312f63646e5f737461747573]
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WebWizards.NZ
2024-02-28 00:18:06
(2 years ago)
Trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 18:30:08
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 13:30:01.870733 2023] [security2:error] [pid 27365] [client 2a02:c207:2048:9276::1:59338] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.monogay.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.monogay.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVulqbyPHTHyR_b1V4cABQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 18:03:37
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 13:03:29.456666 2023] [security2:error] [pid 10936] [client 2a02:c207:2048:9276::1:55540] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.maffiniandbearce.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.maffiniandbearce.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVufcSrMgqCMzcPPav7fUAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 16:59:44
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 11:59:38.936082 2023] [security2:error] [pid 22287] [client 2a02:c207:2048:9276::1:35162] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.iggysseremba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.iggysseremba.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVuQelkvFFDXtFMKH4a-LwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 16:31:00
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 11:30:56.454100 2023] [security2:error] [pid 16420] [client 2a02:c207:2048:9276::1:48782] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.goodacoustic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.goodacoustic.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVuJwMttNihKiiaBCD-qDgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 16:12:24
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 11:12:20.508253 2023] [security2:error] [pid 8845] [client 2a02:c207:2048:9276::1:45554] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.foe4408.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.foe4408.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVuFZLRy5Y_sU4m2vKQAEwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 14:48:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 09:47:59.496033 2023] [security2:error] [pid 25078] [client 2a02:c207:2048:9276::1:52152] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.caferutadelaseda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.caferutadelaseda.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVtxn73JNUfQ-SjRCeKCbAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 14:24:58
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 09:24:54.168193 2023] [security2:error] [pid 4760] [client 2a02:c207:2048:9276::1:51094] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.batesstrategygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.batesstrategygroup.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVtsNmcokoucyXRwaBmm1AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-20 14:02:10
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver ...
show more
(mod_security) mod_security (id:225170) triggered by 2a02:c207:2048:9276::1 (vmi489276.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 20 09:02:03.885212 2023] [security2:error] [pid 20230] [client 2a02:c207:2048:9276::1:40272] [client 2a02:c207:2048:9276::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||americasdairylandgolf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americasdairylandgolf.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ZVtm2909aUuiuVZQaPwBbQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack