🇬🇧
noise.agency
2026-04-14 10:46:15
(4 months ago)
(wordpress) Failed wordpress login from 124.217.52.108 (PH/Philippines/-)
Brute-Force
🇺🇸
myagent.site
2026-04-14 10:17:10
(4 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇩🇪
big-cloud.nl
2026-04-14 01:26:48
(4 months ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
4server
2026-04-13 02:21:33
(4 months ago)
[MonApr1304:21:30.3696042026][security2:error][pid83539:tid83608][client124.217.52.108:0]ModSecurity ...
show more
[MonApr1304:21:30.3696042026][security2:error][pid83539:tid83608][client124.217.52.108:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"148\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"serban.ch\"][uri\"/xmlrpc.php\"][unique_id\"adxTKjwrArZ5LttcgI4xegAAAEg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
Marc
2026-04-12 14:50:42
(4 months ago)
Brute-Force
Web App Attack
🇺🇸
myagent.site
2026-04-12 14:45:40
(4 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇳🇱
wlt-blocker
2026-04-12 14:12:28
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇲🇽
impra
2026-04-12 11:03:40
(4 months ago)
Detected 16 connection attempts.
Port Scan
Hacking
Web App Attack
🇳🇱
wlt-blocker
2026-04-11 06:33:52
(5 months ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 11:29:24
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 07:29:16.598818 2026] [security2:error] [pid 3876233:tid 3876233] [client 124.217.52.108:47485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mirai-labo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mirai-labo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adjfDI7TuJq-S3cobOC9AAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-08 01:57:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 21:57:24.036827 2026] [security2:error] [pid 2478720:tid 2478720] [client 124.217.52.108:48366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nuewines.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nuewines.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adW2BAvY-dalIg0a-NO7SgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-04-07 14:37:44
(5 months ago)
(wordpress) Failed wordpress login from 124.217.52.108 (PH/Philippines/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-04-07 14:36:11
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 124.217.52.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 10:36:06.547408 2026] [security2:error] [pid 1538700:tid 1538700] [client 124.217.52.108:46896] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wild-goose.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wild-goose.net"] [uri "/wp-json/wp/v2/users"] [unique_id "adUWVvpxHNcw_hOwkt2XWgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-04-07 14:35:55
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
mnsf
2026-04-07 13:05:34
(5 months ago)
Xmlrpc Caught (7)
Brute-Force
Web App Attack