🇺🇸
mnsf
2026-07-08 11:05:13
(10 hours ago)
Xmlrpc Caught (8)
Brute-Force
Web App Attack
2026-07-08 10:20:19
(11 hours ago)
Fail2ban filtered
...
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 10:17:22
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 06:17:16.796219 2026] [security2:error] [pid 25976:tid 25976] [client 164.100.212.217:50691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newcitypark.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newcitypark.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ak4jrO3CXRGApxJefEwN0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-07-08 08:00:43
(13 hours ago)
(xmlrpc) Failed xmlrpc access from 164.100.212.217 (IN/India/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
big-cloud.nl
2026-07-07 10:36:43
(1 day ago)
Try to access /de-ideale-stookmix//xmlrpc.php
Web App Attack
🇫🇷
dynamix
2026-07-06 06:12:48
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-06-22 05:56:34
(2 weeks ago)
Try to access /gebruikte-zadels//xmlrpc.php
Web App Attack
🇫🇷
dynamix
2026-06-19 05:45:15
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇨🇭
4server
2026-06-15 07:50:13
(3 weeks ago)
[MonJun1509:50:09.0123342026][security2:error][pid2208135:tid2208376][client164.100.212.217:0]ModSec ...
show more
[MonJun1509:50:09.0123342026][security2:error][pid2208135:tid2208376][client164.100.212.217:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"minondou-togo.ch\"][uri\"/xmlrpc.php\"][unique_id\"ai-usef1Z9MXxTj3b8Xc3wAAAIA\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 09:08:42
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:08:37.953186 2026] [security2:error] [pid 29939:tid 29939] [client 164.100.212.217:40328] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lysedzija.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lysedzija.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aivMlS_c7SiCGH2-sMZRbgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 05:58:09
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 164.100.212.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:58:02.324218 2026] [security2:error] [pid 14265:tid 14265] [client 164.100.212.217:60039] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||edgecomix.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "edgecomix.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aij86rjHReb7wtUK7izXpwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇴
adalbertoreyes.org
2026-06-09 18:23:08
(4 weeks ago)
CategoryPortScan
Port Scan