2024-09-19 06:39:51
(1 year ago)
postfix
Email Spam
Web App Attack
2023-12-26 19:15:02
(2 years ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇬🇧
Swiptly
2023-12-26 15:20:00
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2023-12-24 16:03:16
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2023-12-23 11:06:33
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
maxxsense
2023-12-18 12:53:06
(2 years ago)
(wordpress-user-enum) Failed wordpress-user-enum trigger from 31.31.198.99 (RU/Russia/server4.hostin ...
show more
(wordpress-user-enum) Failed wordpress-user-enum trigger from 31.31.198.99 (RU/Russia/server4.hosting.reg.ru)
show less
Brute-Force
🇺🇸
TPI-Abuse
2023-12-17 14:36:06
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 09:35:59.909337 2023] [security2:error] [pid 21160] [client 31.31.198.99:34184] [client 31.31.198.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||socialalchemy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "socialalchemy.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZX8HT4ZElzpPLd7LSgbMIgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 09:53:57
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 04:53:51.790069 2023] [security2:error] [pid 4666:tid 47751389792000] [client 31.31.198.99:60506] [client 31.31.198.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.eceinal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.eceinal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZX7FLwlW-EzQbj8xPOf1hQAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-15 15:32:14
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 31.31.198.99 (server4.hosting.reg.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 15 10:32:09.264419 2023] [security2:error] [pid 26838] [client 31.31.198.99:47140] [client 31.31.198.99] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.onlinesuretybonds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.onlinesuretybonds.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZXxxeb-CsJykSL1tLV8N-QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
bittiguru.fi
2023-12-15 13:01:56
(2 years ago)
31.31.198.99 - [15/Dec/2023:15:01:54 +0200] "POST /xmlrpc.php HTTP/1.1" 404 56362 "-" "Mozilla/5.0 ( ...
show more
31.31.198.99 - [15/Dec/2023:15:01:54 +0200] "POST /xmlrpc.php HTTP/1.1" 404 56362 "-" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" "-"
31.31.198.99 - [15/Dec/2023:15:01:55 +0200] "POST /wordpress/xmlrpc.php HTTP/1.1" 403 1770 "-" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Mobile Safari/537.36" "-"
...
show less
Hacking
Brute-Force
Web App Attack
2023-12-13 01:00:55
(2 years ago)
dovecot
Brute-Force
Web App Attack
🇨🇭
unifr
2023-10-19 03:15:48
(2 years ago)
Unauthorized IMAP connection attempt
Brute-Force
🇩🇰
wnbhosting.dk
2023-09-18 01:13:26
(2 years ago)
WP xmlrpc [2023-09-18T03:13:26+02:00]
Hacking
Web App Attack
🇩🇰
wnbhosting.dk
2023-09-17 14:18:01
(2 years ago)
WP xmlrpc [2023-09-17T16:18:01+02:00]
Hacking
Web App Attack
🇩🇰
wnbhosting.dk
2023-09-17 10:13:35
(2 years ago)
WP xmlrpc [2023-09-17T12:13:35+02:00]
Hacking
Web App Attack