🇺🇸
TPI-Abuse
2026-07-04 03:11:30
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 23:11:24.044361 2026] [security2:error] [pid 15911:tid 15911] [client 1.20.104.62:54523] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 1.20.104.62 (+1 hits since last alert)|kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kaylamaclaincounseling.com"] [uri "/xmlrpc.php"] [unique_id "akh53ObwFz2aVAzbZSTrqgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 02:11:05
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 22:10:59.591222 2026] [security2:error] [pid 9381:tid 9396] [client 1.20.104.62:50350] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 1.20.104.62 (+1 hits since last alert)|reghay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reghay.com"] [uri "/xmlrpc.php"] [unique_id "akhrs38IVT_MjRnvcYckrgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 00:13:04
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:12:58.144515 2026] [security2:error] [pid 15686:tid 15686] [client 1.20.104.62:61945] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 1.20.104.62 (+1 hits since last alert)|xyncom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xyncom.com"] [uri "/xmlrpc.php"] [unique_id "akhQCse7km-xwX0JNVsSvwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 23:08:24
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 1.20.104.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:08:18.436268 2026] [security2:error] [pid 12104:tid 12104] [client 1.20.104.62:23000] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 1.20.104.62 (+1 hits since last alert)|mariarozella.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mariarozella.com"] [uri "/xmlrpc.php"] [unique_id "akhA4sa42IMvxZu_LCcevgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-03 20:35:10
(1 day ago)
Attac
Brute-Force
🇦🇺
screwlooseit.com.au
2026-07-03 15:37:31
(1 day ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
TH/Thailand/-
Web App Attack
🇬🇧
catalink.com
2025-06-18 03:40:24
(1 year ago)
Brute forcing Wordpress login
Exploited Host
Web App Attack
🇹🇷
rtbh.com.tr
2025-04-22 12:06:15
(1 year ago)
list.rtbh.com.tr report: tcp/445
Brute-Force
🇹🇷
rtbh.com.tr
2025-04-22 08:06:14
(1 year ago)
list.rtbh.com.tr report: tcp/445
Brute-Force
🇩🇪
ⓔⓜⓙⓔⓔ
2024-10-31 09:05:30
(1 year ago)
SMB 🖴 Honeypot: connected to port 445 by 1.20.104.62: port 58033
Port Scan
2022-10-11 22:08:21
(3 years ago)
RDP brute force attack.
Port Scan
Brute-Force