🇨🇦
mitsurugi
2025-03-23 17:32:00
(1 year ago)
Xmlrpc attack.
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-03-19 20:48:46
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
mnsf
2025-03-19 11:05:47
(1 year ago)
Too many Status 40X (18)
Brute-Force
Web App Attack
🇫🇮
YF
2025-03-19 11:00:10
(1 year ago)
xmlrpc.php (Potential DDoS or brute force)
Brute-Force
Web App Attack
2025-03-19 10:27:55
(1 year ago)
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-03-19 10:21:32
(1 year ago)
96.052 requests to */xmlrpc.php
1.243 requests to */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇮🇱
Dolphi
2025-03-19 10:20:03
(1 year ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-19 10:18:56
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 19 06:18:50.255552 2025] [security2:error] [pid 14928:tid 14928] [client 34.122.110.154:59744] [client 34.122.110.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||towlesilvapsychotherapy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "towlesilvapsychotherapy.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z9qaCg1Vxz0Dzc246qxlGgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2025-03-19 10:16:43
(1 year ago)
(mod_security) mod_security (id:210410) triggered by 34.122.110.154 (US/United States/154.110.122.34 ...
show more
(mod_security) mod_security (id:210410) triggered by 34.122.110.154 (US/United States/154.110.122.34.bc.googleusercontent.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-19 09:59:33
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 19 05:59:31.001412 2025] [security2:error] [pid 25462:tid 25462] [client 34.122.110.154:55202] [client 34.122.110.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oruhu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oruhu.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z9qVguY3wPTwSn64JtuPSgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-19 09:39:43
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.122.110.154 (154.110.122.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 19 05:39:35.629147 2025] [security2:error] [pid 1356136:tid 1356136] [client 34.122.110.154:56872] [client 34.122.110.154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cms2020.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cms2020.com"] [uri "/home/wp-json/wp/v2/users/"] [unique_id "Z9qQ15Cm9TwWOFr0OPqopwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack