๐ฒ๐พ
Rizzy
2026-06-04 13:05:24
(10 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
PHAM
2026-06-04 13:05:00
(10 hours ago)
Shield Guard: Scanner: wordpress (+70) | Chemin suspect: /xmlrpc.php | xmlrpc.php bloquรฉ
Web App Attack
Port Scan
๐บ๐ธ
TPI-Abuse
2026-06-04 12:56:36
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadba ...
show more
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:56:28.904933 2026] [security2:error] [pid 25018:tid 25018] [client 103.50.83.35:62104] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.50.83.35 (+1 hits since last alert)|kiinlog.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kiinlog.com"] [uri "/xmlrpc.php"] [unique_id "aiF1_O6BKiYLsjtz6NkGCwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 12:07:44
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadba ...
show more
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:07:41.223303 2026] [security2:error] [pid 26951:tid 26951] [client 103.50.83.35:59896] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.50.83.35 (+1 hits since last alert)|aaattanasio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aaattanasio.com"] [uri "/xmlrpc.php"] [unique_id "aiFqjST_ULbUBtCQYn9BkwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 10:44:28
(13 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadba ...
show more
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 06:44:23.317283 2026] [security2:error] [pid 31404:tid 31404] [client 103.50.83.35:60264] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.50.83.35 (+1 hits since last alert)|drjasonkolber.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drjasonkolber.com"] [uri "/xmlrpc.php"] [unique_id "aiFXB4L5XBvN54X8JbFdXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 06:20:39
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadba ...
show more
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:20:35.529353 2026] [security2:error] [pid 2966:tid 2966] [client 103.50.83.35:51938] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.50.83.35 (+1 hits since last alert)|brandoncomputergeeks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brandoncomputergeeks.com"] [uri "/xmlrpc.php"] [unique_id "aiEZM6C69cVfczb0pJPq4AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 06:03:49
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadba ...
show more
(mod_security) mod_security (id:240335) triggered by 103.50.83.35 (node-103-50-83-35.alliancebroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:03:45.615539 2026] [security2:error] [pid 21723:tid 21723] [client 103.50.83.35:52013] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.50.83.35 (+1 hits since last alert)|smoothiessoupssalads.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "smoothiessoupssalads.com"] [uri "/xmlrpc.php"] [unique_id "aiEVQW7USR9sNbYxsfyk1gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
10dencehispahard SL
2022-12-13 17:24:58
(3 years ago)
Unauthorized login attempts [{'wordpress-xmlrpc', 'wordpress'}]
Brute-Force
Web App Attack