🇲🇾
Rizzy
2026-06-16 00:34:00
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇬🇧
noise.agency
2026-06-15 08:29:28
(19 hours ago)
(wordpress) Failed wordpress login from 124.105.206.79 (PH/Philippines/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 03:54:20
(23 hours ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:54:12.642831 2026] [security2:error] [pid 12262:tid 12262] [client 124.105.206.79:56535] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fgrotary.org"] [uri "/xmlrpc.php"] [unique_id "ai93ZLBeWwJgCsx05IzEYAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:51:38
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:51:32.703679 2026] [security2:error] [pid 23690:tid 23690] [client 124.105.206.79:1738] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|evelynkay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "evelynkay.com"] [uri "/xmlrpc.php"] [unique_id "ai9apHENdHKjjoRpyEQtqQAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-15 01:19:00
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
dynamix
2026-06-12 05:59:06
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇲🇹
Malta
2026-06-12 00:39:29
(4 days ago)
124.105.206.79 - - [12/Jun/2026:02:39:29 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack/13.0; WordPress ...
show more
124.105.206.79 - - [12/Jun/2026:02:39:29 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack/13.0; WordPress/6.1; http://site93245019.com"
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-06-11 04:41:02
(4 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇪🇸
alferez
2026-06-10 01:11:19
(6 days ago)
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:42:13
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:42:07.813989 2026] [security2:error] [pid 31954:tid 31954] [client 124.105.206.79:8469] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|salernospizza.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "salernospizza.com"] [uri "/xmlrpc.php"] [unique_id "aiiy328h_NSor9EdW9XjYwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 06:57:40
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:57:35.037192 2026] [security2:error] [pid 5625:tid 5632] [client 124.105.206.79:28764] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|tkfay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tkfay.com"] [uri "/xmlrpc.php"] [unique_id "aie5X94C6zKELK9NhAoV1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-06-09 06:23:37
(6 days ago)
124.105.206.79 - - [09/Jun/2026:08:23:36 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.co ...
show more
124.105.206.79 - - [09/Jun/2026:08:23:36 +0200] "POST /xmlrpc.php HTTP/1.1" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
show less
Hacking
Web App Attack
2026-06-08 07:59:03
(1 week ago)
[ns41.kdns.gr] httpd-xmlrpc-post: sites=msjacovides.com; logs=/var/log/httpd/domains/msjacovides.com ...
show more
[ns41.kdns.gr] httpd-xmlrpc-post: sites=msjacovides.com; logs=/var/log/httpd/domains/msjacovides.com.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 07:28:10
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:28:04.091669 2026] [security2:error] [pid 24845:tid 24845] [client 124.105.206.79:11841] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|97films.media|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "97films.media"] [uri "/xmlrpc.php"] [unique_id "aiZvBKq-zPR6ax6yw8oOSAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 07:01:40
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 124.105.206.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 03:01:32.170824 2026] [security2:error] [pid 5469:tid 5469] [client 124.105.206.79:32617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 124.105.206.79 (+1 hits since last alert)|newcitypark.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newcitypark.com"] [uri "/xmlrpc.php"] [unique_id "aiPFzLE3diY604e8vxg1AQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack