rtbh.com.tr
2025-02-16 20:49:45
(1 month ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
mitsurugi
2025-02-16 15:35:00
(1 month ago)
Xmlrpc attack.
Brute-Force
Web App Attack
LRob.fr
2025-02-16 09:15:20
(1 month ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
TPI-Abuse
2025-02-16 09:13:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 04:13:11.390857 2025] [security2:error] [pid 1432:tid 1455] [client 34.105.35.44:52539] [client 34.105.35.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||minutosrobados.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "minutosrobados.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z7GsJ2rQhQSFO9zvl6kRMQAAAAU"] show less
Brute-Force
Bad Web Bot
Web App Attack
MAGIC
2025-02-16 09:06:53
(1 month ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
FeG Deutschland
2025-02-16 09:00:42
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
Anonymous
2025-02-16 08:39:50
(1 month ago)
apache-wordpress-login
Brute-Force
Web App Attack
TPI-Abuse
2025-02-16 08:38:48
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 03:38:43.243005 2025] [security2:error] [pid 4389:tid 4389] [client 34.105.35.44:56666] [client 34.105.35.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.michelehoop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.michelehoop.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z7GkE5db_Am_U7VCGup2hAAAAAk"] show less
Brute-Force
Bad Web Bot
Web App Attack
screwlooseit.com.au
2025-02-16 08:28:13
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/44.35.105.34.bc.googleusercontent.c ... show more Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/44.35.105.34.bc.googleusercontent.com show less
Web App Attack
cmbplf
2025-02-16 08:25:43
(1 month ago)
18.743 requests to */xmlrpc.php
376 requests to */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
TPI-Abuse
2025-02-16 08:11:40
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent ... show more (mod_security) mod_security (id:225170) triggered by 34.105.35.44 (44.35.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 03:11:35.022450 2025] [security2:error] [pid 30197:tid 30200] [client 34.105.35.44:54597] [client 34.105.35.44] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sillytheatreproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sillytheatreproductions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z7GdtySfv2eTU034IU8jGwAAAQE"] show less
Brute-Force
Bad Web Bot
Web App Attack