🇺🇸
TPI-Abuse
2025-02-25 20:39:19
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati ...
show more
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 15:39:13.659662 2025] [security2:error] [pid 3207:tid 3207] [client 80.211.163.32:45880] [client 80.211.163.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||estudiovarela.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "estudiovarela.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z74qcd_MUK4Cum7a3PvPzAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-20 13:16:39
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati ...
show more
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 20 08:16:33.129160 2025] [security2:error] [pid 23215:tid 23215] [client 80.211.163.32:52974] [client 80.211.163.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundaciondamashcc.org.ec|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundaciondamashcc.org.ec"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7crMXeuNk_S1NsDNEUk_QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-18 23:02:44
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati ...
show more
(mod_security) mod_security (id:225170) triggered by 80.211.163.32 (host32-163-211-80.serverdedicati.aruba.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 18 18:02:39.092776 2025] [security2:error] [pid 13906:tid 13906] [client 80.211.163.32:34364] [client 80.211.163.32] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||persnicketyinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7URj1LsClMNw-QOzB8bqwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-02-18 22:25:03
(1 year ago)
Malicious activity detected
Hacking
Brute-Force
2025-01-29 23:01:18
(1 year ago)
Reported from Nginx log analysis 18. Log:
Port Scan
Brute-Force
SSH
🇩🇪
london2038.com
2025-01-29 10:26:09
(1 year ago)
Attacking WordPress
80.211.163.32 - - [29/Jan/2025:11:26:05 +0100] "POST /wp-login.php HTTP/1.1" 503 ...
show more
Attacking WordPress
80.211.163.32 - - [29/Jan/2025:11:26:05 +0100] "POST /wp-login.php HTTP/1.1" 503 19311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0"
show less
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2025-01-29 07:41:27
(1 year ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
octageeks.com
2025-01-29 05:06:34
(1 year ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇲🇹
Malta
2025-01-28 18:50:24
(1 year ago)
80.211.163.32 - - [28/Jan/2025:19:50:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
80.211.163.32 - - [28/Jan/2025:19:50:24 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0"
show less
Hacking
Web App Attack
2025-01-28 17:00:51
(1 year ago)
Reported from Nginx log analysis 18. Log: 80.211.163.32 - - [28/Jan/2025:xx:xx:xx 0100] "POST /wp-l ...
show more
Reported from Nginx log analysis 18. Log: 80.211.163.32 - - [28/Jan/2025:xx:xx:xx 0100] "POST /wp-login.php HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" "-" "IT Italy Arezzo" "AS31034" "Aruba S.p.A."
show less
Port Scan
Brute-Force
SSH
2025-01-28 10:29:29
(1 year ago)
Brute Force Login Attempts
Hacking
Brute-Force
🇫🇷
tecnicorioja
2025-01-27 23:00:29
(1 year ago)
POST /xmlrpc.php [27/Jan/2025:04:06:08
Brute-Force
Web App Attack
2025-01-27 17:00:20
(1 year ago)
Reported from Nginx log analysis 18. Log: 80.211.163.32 - - [27/Jan/2025:xx:xx:xx 0100] "POST /xmlr ...
show more
Reported from Nginx log analysis 18. Log: 80.211.163.32 - - [27/Jan/2025:xx:xx:xx 0100] "POST /xmlrpc.php HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0" "-" "IT Italy Arezzo" "AS31034" "Aruba S.p.A."
show less
Port Scan
Brute-Force
SSH
🇬🇧
thetomtaylor.co.uk
2025-01-27 00:10:15
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot
Web App Attack
🇵🇱
bmino.pl
2025-01-26 14:13:18
(1 year ago)
Autoban 80.211.163.32 BLOCK ACCESS
Web App Attack