๐บ๐ธ
TPI-Abuse
2026-06-10 08:26:07
(44 minutes ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:26:02.789696 2026] [security2:error] [pid 19041:tid 19041] [client 160.30.108.205:52883] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|livingminimal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "livingminimal.com"] [uri "/xmlrpc.php"] [unique_id "aikfmp0TlfKSApwjNVaXJgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-10 04:29:18
(4 hours ago)
[redacted] 160.30.108.205 - - [10/Jun/2026:06:28:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 160.30.108.205 - - [10/Jun/2026:06:28:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 160.30.108.205 - - [10/Jun/2026:06:28:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site93787677.com"
[redacted] 160.30.108.205 - - [10/Jun/2026:06:28:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site66132134.com"
[redacted] 160.30.108.205 - - [10/Jun/2026:06:29:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site20401229.com"
[redacted] 160.30.108.205 - - [10/Jun/2026:06:29:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site68120665.com"
...
show less
Hacking
Web App Attack
๐บ๐ธ
integrantservices.com
2026-06-09 10:40:03
(22 hours ago)
(wordpress) Failed wordpress login from 160.30.108.205 (PK/Pakistan/-)
Brute-Force
๐ฉ๐ช
ger-stg-sifi1
2026-06-09 10:39:57
(22 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ซ๐ท
Kenshin869
2026-06-09 04:35:05
(1 day ago)
Wordpress unauthorized access attempt
Brute-Force
Anonymous
2026-06-08 09:00:05
(2 days ago)
Web App Attack, Hacking
Hacking
Web App Attack
Anonymous
2026-06-05 04:30:44
(5 days ago)
Attac
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-04 12:51:19
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:51:15.592608 2026] [security2:error] [pid 8686:tid 8686] [client 160.30.108.205:63521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|artevoix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artevoix.com"] [uri "/xmlrpc.php"] [unique_id "aiF0wwPyyQ9iT2eng3d5BgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 11:57:43
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 07:57:38.647023 2026] [security2:error] [pid 12727:tid 12727] [client 160.30.108.205:55943] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|lambert-heating-and-air.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lambert-heating-and-air.com"] [uri "/xmlrpc.php"] [unique_id "aiFoMtTRZpb2hDzb9DMyVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 07:15:07
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 03:15:00.677898 2026] [security2:error] [pid 12671:tid 12671] [client 160.30.108.205:62720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mahjongcouture.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mahjongcouture.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiEl9N624ieINutGXxZlkAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 03:36:27
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 23:36:20.439234 2026] [security2:error] [pid 21464:tid 21464] [client 160.30.108.205:60259] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|high5-vr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "high5-vr.com"] [uri "/xmlrpc.php"] [unique_id "aiDytHxMit7Djj4GgylKzwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 14:45:48
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 10:45:42.806472 2026] [security2:error] [pid 11168:tid 11168] [client 160.30.108.205:53906] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|iplantotravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iplantotravel.com"] [uri "/xmlrpc.php"] [unique_id "aiA-Fp5hNHfmftukVQ8bxgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-03 11:57:15
(6 days ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=enerescpm.com; logs=/var/log/httpd/domains/enerescpm.com.log ...
show more
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=enerescpm.com; logs=/var/log/httpd/domains/enerescpm.com.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 10:18:40
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.30.108.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 06:18:36.539457 2026] [security2:error] [pid 24729:tid 24729] [client 160.30.108.205:53227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.30.108.205 (+1 hits since last alert)|waterjetsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "waterjetsolutions.com"] [uri "/xmlrpc.php"] [unique_id "ah__fI_cLVmf7i4gSQW0fwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-03 09:11:14
(6 days ago)
Fail2ban filtered
...
Web App Attack