🇺🇸
TPI-Abuse
2026-07-04 22:48:31
(1 hour ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:48:17.433100 2026] [security2:error] [pid 23928:tid 23928] [client 102.206.112.112:38875] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkalleyproductions.com"] [uri "/xmlrpc.php"] [unique_id "akmNsYuB0jc3SdVx53UHzAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 22:09:00
(1 hour ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 18:08:42.730959 2026] [security2:error] [pid 26447:tid 26447] [client 102.206.112.112:62217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|dynamic-therapy-mn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dynamic-therapy-mn.com"] [uri "/xmlrpc.php"] [unique_id "akmEatAqNo3Ib4nzGXuKKgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-04 21:24:21
(2 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
-
Web App Attack
2026-07-04 20:23:31
(3 hours ago)
(wordpress) Failed wordpress login from 102.206.112.112 (KE/Kenya/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-04 18:52:10
(4 hours ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 14:51:56.635176 2026] [security2:error] [pid 31587:tid 31587] [client 102.206.112.112:62114] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "boaredraven.com"] [uri "/xmlrpc.php"] [unique_id "aklWTFxa9wVstqzS4R09QQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-07-04 16:29:04
(7 hours ago)
(xmlrpc) Failed xmlrpc access from 102.206.112.112 (KE/Kenya/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
TPI-Abuse
2026-07-04 12:23:10
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 08:23:03.951025 2026] [security2:error] [pid 28249:tid 28249] [client 102.206.112.112:51839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|keychainfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "keychainfilms.com"] [uri "/xmlrpc.php"] [unique_id "akj7J0ZVMcLJc_oqkKzECgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-04 04:48:59
(19 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
neckaralb-admin.de
2026-07-04 04:34:40
(19 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-07-04 03:37:13
(20 hours ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-07-04 00:04:30
(23 hours ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:04:23.751567 2026] [security2:error] [pid 31533:tid 31533] [client 102.206.112.112:64488] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|btccasting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "btccasting.com"] [uri "/xmlrpc.php"] [unique_id "akhOB-MOZeqNHKo7EAL4TgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 23:33:03
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:32:57.026108 2026] [security2:error] [pid 4278:tid 4278] [client 102.206.112.112:51028] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|riccardiagency.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "riccardiagency.com"] [uri "/xmlrpc.php"] [unique_id "akhGqRoOt_1j6BRUwztCTAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-03 22:25:06
(1 day ago)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-07-03 18:41:16
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 13:55:46
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 102.206.112.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 09:55:39.510537 2026] [security2:error] [pid 21041:tid 21041] [client 102.206.112.112:61090] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 102.206.112.112 (+1 hits since last alert)|ramseycountycorruption.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ramseycountycorruption.com"] [uri "/xmlrpc.php"] [unique_id "ake_WwCMT2T6epZ0jP4X_wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack