|
🇫🇷
Kenshin869
|
|
Wordpress unauthorized access attempt
|
Brute-Force
|
|
|
🇦🇺
MAGIC
|
|
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
🇪🇸
10dencehispahard SL
|
|
Unauthorized login attempts [ accesslogs]
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 13:51:13.180207 2024] [security2:error] [pid 28626] [client 94.46.22.120:18781] [client 94.46.22.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcfuel.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcfuel.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZpFtEfNCvYjJ1uXTrBD-ggAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 11:28:49.051808 2024] [security2:error] [pid 17462] [client 94.46.22.120:60573] [client 94.46.22.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cccorponline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cccorponline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZpFLsUqaaqW5vPNhSn3RswAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 11:07:15.964188 2024] [security2:error] [pid 13849] [client 94.46.22.120:42903] [client 94.46.22.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||market1st.bridgital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "market1st.bridgital.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZpFGo1-aQKszHJeTx-Q9dgAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 05:58:18.989491 2024] [security2:error] [pid 2869] [client 94.46.22.120:10111] [client 94.46.22.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sutherlandyogastudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZpD-OjRAlp5altLRvGN6sAAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 94.46.22.120 (host3em1.ptisp.pt): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 12 05:10:33.539714 2024] [security2:error] [pid 1663] [client 94.46.22.120:44463] [client 94.46.22.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||uccgt.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "uccgt.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZpDzCemZwdqAUez0APWMDwAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
georgengelmann
|
|
Failed login attempt for pedro
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
georgengelmann
|
|
Failed login attempt for pedro
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
ger-stg-sifi1
|
|
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack
|
|
|
🇳🇱
Linuxmalwarehuntingnl
|
|
Unauthorized connection attempt
|
Brute-Force
|
|
|
🇦🇺
weblite
|
|
LONG_RUNNING WP_XMLRPC_ABUSE
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
mawan
|
|
Suspected of having performed illicit activity on LAX server.
|
Web App Attack
|
|