🇬🇧
openstrike.co.uk
2024-05-03 05:12:41
(2 years ago)
72 attacks on Wordpress URLs, PHP URLs:
GET /keyword.cgi?id=25/sito/wp-includes/wlwmanifest.xml HTTP ...
show more
72 attacks on Wordpress URLs, PHP URLs:
GET /keyword.cgi?id=25/sito/wp-includes/wlwmanifest.xml HTTP/1.1
GET /keyword.cgi?id=25/xmlrpc.php?rsd HTTP/1.1
show less
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 11:15:35
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 07:15:29.608109 2024] [security2:error] [pid 19440] [client 68.183.86.164:61118] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.creationorevolution.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.creationorevolution.net"] [uri "/mrprentice/index.htm/wp-json/wp/v2/users/"] [unique_id "ZjN10ZRf5l5IlaC2KE3FWwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 09:47:19
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 05:47:12.680099 2024] [security2:error] [pid 31852] [client 68.183.86.164:54387] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pioneerconnection.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pioneerconnection.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjNhIEdAwPa1-dPct5tiVwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-05-02 08:36:17
(2 years ago)
(wordpress) Failed wordpress login from 68.183.86.164 (IN/India/-)
Brute-Force
🇮🇱
Dolphi
2024-05-02 07:30:06
(2 years ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 06:49:38
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 02 02:49:32.938753 2024] [security2:error] [pid 16136:tid 47614554818304] [client 68.183.86.164:59451] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ethicmark.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ethicmark.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjM3fDeu-JP9F6HdPBwrVgAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2024-05-02 06:01:44
(2 years ago)
Excessive BAD Request Abuse
Bad Web Bot
🇬🇧
openstrike.co.uk
2024-05-02 05:12:34
(2 years ago)
72 attacks on Wordpress URLs, PHP URLs:
GET /domain.cgi?id=79/sito/wp-includes/wlwmanifest.xml HTTP/ ...
show more
72 attacks on Wordpress URLs, PHP URLs:
GET /domain.cgi?id=79/sito/wp-includes/wlwmanifest.xml HTTP/1.1
GET /domain.cgi?id=79/xmlrpc.php?rsd HTTP/1.1
show less
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 03:11:11
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 23:11:05.807626 2024] [security2:error] [pid 11876] [client 68.183.86.164:64262] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||isitel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "isitel.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjMESRa1b3h6M5ztjDQfQAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 01:50:41
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 21:50:34.798648 2024] [security2:error] [pid 2068871] [client 68.183.86.164:51117] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.prostar.industries|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.prostar.industries"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjLxaua1B8AH6Il7IzRJ8QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-05-02 01:21:02
(2 years ago)
Excessive 404 Traffic Wordpress
Web App Attack
🇺🇸
TPI-Abuse
2024-05-02 01:16:45
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 21:16:37.676818 2024] [security2:error] [pid 19887] [client 68.183.86.164:56630] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.floridafrontiersmen.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.floridafrontiersmen.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjLpddeX0df8zlbHYFeOogAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2024-05-02 00:32:12
(2 years ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2024-05-01 22:45:42
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.86.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 18:45:35.436278 2024] [security2:error] [pid 1024033] [client 68.183.86.164:63521] [client 68.183.86.164] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ralphharris.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ralphharris.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZjLGD4bP9qSy3IvvoRO8xgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Donovan_DMC
2024-05-01 22:16:51
(2 years ago)
GET //wp-includes/wlwmanifest.xml - 68.183.86.164 (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ...
show more
GET //wp-includes/wlwmanifest.xml - 68.183.86.164 (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36)
[wp-includes]: WordPress Includes Scanner
show less
Bad Web Bot
Web App Attack