|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
|
🇳🇱
i-turnradio.nl
|
|
2025-11-03 @ 20:52:09 (CET) ~ Blocked based on risk assessment and prior abuse reports
|
Web App Attack
|
|
|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
|
🇩🇪
sverson
|
|
Vulnerability probe of page
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.147.121.38 (nat-T1-3.g-service.ru): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.121.38 (nat-T1-3.g-service.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 11:37:54.868734 2025] [security2:error] [pid 8681:tid 8681] [client 45.147.121.38:18629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fusionrep.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fusionrep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPudUu10JB80AKTO3sGDxAAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.147.121.38 (nat-T1-3.g-service.ru): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 45.147.121.38 (nat-T1-3.g-service.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 09:39:20.300028 2025] [security2:error] [pid 590:tid 590] [client 45.147.121.38:13316] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||babylontravelone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPuBiK_rA91pyYPHIJ-fRwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇿
Tripwire
|
|
Scanning for exploits - /shell.php
|
Web App Attack
|
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
🇬🇧
Globe2
|
|
Multiple ModSec Blocks
|
Web App Attack
|
|
|
🇧🇬
Filipe Dávila
|
|
[Sat Oct 18 23:20:58.396068 2025] [:error] [pid 332618:tid 140273069770496] [client 45.147.121.38:17 ...
show more
[Sat Oct 18 23:20:58.396068 2025] [:error] [pid 332618:tid 140273069770496] [client 45.147.121.38:1774] [client 45.147.121.38] [redacted]: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "[redacted][redacted]"] [[redacted] "233"] [id "[redacted]"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "[redacted]/4.7.0-dev"] [tag "[redacted]"] [tag "[redacted]"] [hostname "[redacted]"] [uri "/phpinfo.php"] [unique_id "aPRZGuw66onpfdJ5HAnRigAAAFY"]
show less
|
Web App Attack
|
|
|
🇧🇪
cmbplf
|
|
74 requests with url.path */wp-content/plugins/litespeed-cache/readme.txt
|
Brute-Force
Bad Web Bot
|
|
|
🇺🇸
NXTwoThou
|
|
/info.php
|
Web App Attack
|
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from 4 different servers
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
paulrusiecki
|
|
45.147.121.38 - - [16/Oct/2025:00:04:56 +0200] "GET /info.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Wi ...
show more
45.147.121.38 - - [16/Oct/2025:00:04:56 +0200] "GET /info.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.96 Safari/537.36"
45.147.121.38 - - [16/Oct/2025:00:04:56 +0200] "GET /phpinfo.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.96 Safari/537.36"
45.147.121.38 - - [16/Oct/2025:00:04:56 +0200] "GET /p.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.7204.96 Safari/537.36"
...
show less
|
Brute-Force
|
|