🇫🇷
SpaceHost-Server
2026-06-22 22:25:53
(2 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 01:25:58
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 21:25:53.772390 2026] [security2:error] [pid 5119:tid 5228] [client 105.72.246.234:54979] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 105.72.246.234 (+1 hits since last alert)|ethicmark.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ethicmark.org"] [uri "/xmlrpc.php"] [unique_id "ajiPIQZdV1k-rop2HWxstwAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Lunix
2026-06-22 01:22:34
(3 days ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 23:02:21
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 19:02:17.785965 2026] [security2:error] [pid 9112:tid 9112] [client 105.72.246.234:58478] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 105.72.246.234 (+1 hits since last alert)|edgebiopharma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "edgebiopharma.com"] [uri "/xmlrpc.php"] [unique_id "ajhteZYhqNYtn0V4ZBF0JQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-21 21:00:03
(3 days ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 16:00:17
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 12:00:11.082114 2026] [security2:error] [pid 31308:tid 31324] [client 105.72.246.234:60370] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 105.72.246.234 (+1 hits since last alert)|minutosrobados.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "minutosrobados.com"] [uri "/xmlrpc.php"] [unique_id "ajgKi-5T3AWAJesnGsXcBQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 20:32:36
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 16:32:30.439818 2026] [security2:error] [pid 31916:tid 31916] [client 105.72.246.234:59420] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 105.72.246.234 (+1 hits since last alert)|slimlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "slimlaw.com"] [uri "/xmlrpc.php"] [unique_id "ajb43t9Danr_5ka8mVWNHgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 19:57:42
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 105.72.246.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 15:57:36.840688 2026] [security2:error] [pid 5318:tid 5318] [client 105.72.246.234:52902] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 105.72.246.234 (+1 hits since last alert)|ohiohca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ohiohca.com"] [uri "/xmlrpc.php"] [unique_id "ajbwsGzo_950YrsSeRZkMgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Victor López
2026-06-20 18:31:05
(4 days ago)
babystudio4d.com 105.72.246.234 - - [20/Jun/2026:13:30:44 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 ...
show more
babystudio4d.com 105.72.246.234 - - [20/Jun/2026:13:30:44 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com"
babystudio4d.com 105.72.246.234 - - [20/Jun/2026:13:30:53 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com"
babystudio4d.com 105.72.246.234 - - [20/Jun/2026:13:31:04 -0500] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack