🇮🇹
Progetto1
2026-06-09 14:55:02
(3 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇭🇺
bcsaba
2026-06-08 16:51:12
(3 weeks ago)
Repeated request on blocked xmlrpc.php.
165.101.254.202 - - [08/Jun/2026:18:51:11 +0200] "POST /xmlr ...
show more
Repeated request on blocked xmlrpc.php.
165.101.254.202 - - [08/Jun/2026:18:51:11 +0200] "POST /xmlrpc.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
RAP
2026-05-12 15:44:45
(1 month ago)
2026-05-12 15:44:45 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
2026-03-02 07:27:42
(4 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇧🇪
taivas.nl
2026-02-23 08:02:10
(4 months ago)
Wordpress_xmlrpc_attack
Bad Web Bot
🇳🇱
debestelapp
2026-02-22 04:21:10
(4 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-02-02 18:13:49
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 13:13:45.611523 2026] [security2:error] [pid 3178:tid 3178] [client 165.101.254.202:49794] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rwabutazafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rwabutazafoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aYDpWZlLtkx6V3yz_JXnpwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-01 19:38:40
(5 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
TPI-Abuse
2025-12-21 14:01:51
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 21 09:01:46.535645 2025] [security2:error] [pid 14861:tid 14861] [client 165.101.254.202:50894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||americanacademyofteachersofsinging.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "americanacademyofteachersofsinging.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aUf9yl0DtaY3y-cS4759IwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2025-12-05 21:04:02
(6 months ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇺🇸
TPI-Abuse
2025-12-01 11:25:52
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 165.101.254.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 06:25:44.986226 2025] [security2:error] [pid 28242:tid 28259] [client 165.101.254.202:59060] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||honorac.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "honorac.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aS17OIHJqIL5iP86se1gBQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack