🇺🇸
TPI-Abuse
2026-06-04 03:46:52
(7 hours ago)
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:46:48.830540 2026] [security2:error] [pid 15710:tid 15710] [client 116.206.193.60:63197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 116.206.193.60 (+1 hits since last alert)|bikinitweets.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bikinitweets.com"] [uri "/xmlrpc.php"] [unique_id "aiD1KOiGKDVB3iTxCyNrRAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-04 02:52:22
(8 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
WeekendWeb
2026-06-02 11:16:20
(2 days ago)
Wordpress Vunerability attack
Web App Attack
2026-06-02 09:44:39
(2 days ago)
[redacted] 116.206.193.60 - - [02/Jun/2026:11:43:55 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1682 "-" ...
show more
[redacted] 116.206.193.60 - - [02/Jun/2026:11:43:55 +0200] "POST /xmlrpc.php HTTP/1.1" 403 1682 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
[redacted] 116.206.193.60 - - [02/Jun/2026:11:44:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com"
[redacted] 116.206.193.60 - - [02/Jun/2026:11:44:16 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com"
[redacted] 116.206.193.60 - - [02/Jun/2026:11:44:27 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "WordPress.com; https://wordpress.com"
[redacted] 116.206.193.60 - - [02/Jun/2026:11:44:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 0 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
2026-06-02 08:50:28
(2 days ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-02 05:46:04
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:45:59.169022 2026] [security2:error] [pid 26854:tid 26854] [client 116.206.193.60:18975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 116.206.193.60 (+1 hits since last alert)|stoneybluff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stoneybluff.com"] [uri "/xmlrpc.php"] [unique_id "ah5uFwkpaib88v88sDzwTwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 04:43:19
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 00:43:14.066837 2026] [security2:error] [pid 2292:tid 2306] [client 116.206.193.60:49376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 116.206.193.60 (+1 hits since last alert)|quantumgaze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "quantumgaze.com"] [uri "/xmlrpc.php"] [unique_id "ah5fYk32MPi_4VT0pEhYBAAAAUo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 03:12:11
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 116.206.193.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 23:12:05.026584 2026] [security2:error] [pid 767:tid 767] [client 116.206.193.60:4337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 116.206.193.60 (+1 hits since last alert)|genevaatlantic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "genevaatlantic.com"] [uri "/xmlrpc.php"] [unique_id "ah5KBY9j6bNy6f4Xm-ZFzgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-02 02:02:06
(2 days ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS
Web App Attack
🇱🇻
garmtech.com
2026-06-02 01:58:56
(2 days ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
2026-05-29 13:08:51
(5 days ago)
Attac
Brute-Force
🇩🇪
SMARTNET
2026-05-27 06:03:53
(1 week ago)
Aisuru(Mirai variant) DDoS | Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d
DDoS Attack
🇺🇸
windowsforum
2026-05-26 10:16:46
(1 week ago)
Spam bot SSO registration: triggers=sso_service_check, username=NHAW SAI
Web Spam
Bad Web Bot
🇦🇺
MAGIC
2026-01-21 01:18:38
(4 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇫🇷
ericshim.me
2026-01-19 05:01:09
(4 months ago)
Cowrie honeypot hit at 2026-01-18T07:06:42.942438Z
Brute-Force
SSH