|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 05 11:12:00.052562 2024] [security2:error] [pid 3789:tid 47408857745152] [client 46.161.61.38:28307] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sloveniaflyfishing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sloveniaflyfishing.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZmCAQEB8GIUDRtULxRBGAgAAAMo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 23:13:42.776682 2024] [security2:error] [pid 30785] [client 46.161.61.38:43379] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||preventa.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "preventa.click"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl_X5hVEBkfytytfBDou0wAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 22:02:21.109674 2024] [security2:error] [pid 10832] [client 46.161.61.38:36995] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pluralmatrix.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pluralmatrix.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl_HLRIk2FZGH0cMteD2UAAAABc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 21:22:48.657679 2024] [security2:error] [pid 8666] [client 46.161.61.38:43057] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kellenbarger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kellenbarger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl5saBZAJj1KynG-6QF9bQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 07:43:24.650679 2024] [security2:error] [pid 1617] [client 46.161.61.38:34937] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||glendaleheritage.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "glendaleheritage.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Zl2sXP6PGXaeCyYNU8NZfgAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 02 19:19:50.052405 2024] [security2:error] [pid 13060] [client 46.161.61.38:22623] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||f40ph.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "f40ph.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Zlz-FgE-Ero1FfzbN-C5KwAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 sec ...
show more
(mod_security) mod_security (id:225170) triggered by 46.161.61.38 (pinspb.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 01 07:08:05.931863 2024] [security2:error] [pid 18699:tid 47138453935872] [client 46.161.61.38:26801] [client 46.161.61.38] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cheqs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cheqs.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZlsBFSGx6RA0RS0sM66Q3gAAAIY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ช๐ธ
10dencehispahard SL
|
|
Unauthorized login attempts [ accesslogs]
|
Brute-Force
|
|
|
๐ต๐ฑ
rafix
|
|
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
|
DDoS Attack
Bad Web Bot
|
|
|
๐ช๐ธ
10dencehispahard SL
|
|
Unauthorized login attempts [{'wordpress', 'apache-syn-flood'}]
|
Brute-Force
Web App Attack
|
|