🇲🇾
Rizzy
2026-06-15 02:54:45
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-15 02:13:41
(2 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:48:01
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:47:55.963872 2026] [security2:error] [pid 22469:tid 22469] [client 176.29.159.164:11028] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|avalderlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "avalderlaw.com"] [uri "/xmlrpc.php"] [unique_id "ai8vm_WoWuoXFbsfnJYbjgAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:36:41
(6 hours ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:36:36.023262 2026] [security2:error] [pid 22318:tid 22318] [client 176.29.159.164:11213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|enjoymycondos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "enjoymycondos.com"] [uri "/xmlrpc.php"] [unique_id "ai8e5BkxVxXuviYlrILwPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 17:07:45
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 13:07:41.520695 2026] [security2:error] [pid 10086:tid 10086] [client 176.29.159.164:22209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|eileensharaga.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "ai7f3UbsDLvAj3DRheqAWwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-06-14 16:06:31
(12 hours ago)
(wordpress) Failed wordpress login from 176.29.159.164 (JO/Jordan/Amman Governorate/Amman/-)
Brute-Force
2026-06-14 15:54:31
(12 hours ago)
[osotir.org] httpd-xmlrpc-post: sites=drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samp ...
show more
[osotir.org] httpd-xmlrpc-post: sites=drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
2026-06-14 14:12:18
(14 hours ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 13:04:21
(15 hours ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:04:16.161937 2026] [security2:error] [pid 2646:tid 2646] [client 176.29.159.164:15312] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|campos.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "campos.tv"] [uri "/xmlrpc.php"] [unique_id "ai6m0CEwtCMrXNl-icEqowAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-14 10:50:08
(17 hours ago)
(wordpress) Failed wordpress login from 176.29.159.164 (JO/Jordan/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 08:46:01
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:45:56.153822 2026] [security2:error] [pid 30079:tid 30079] [client 176.29.159.164:22718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kimbrothersduluth.com"] [uri "/xmlrpc.php"] [unique_id "ai5qRIcWfYFKXzvZfy33-QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 08:06:04
(20 hours ago)
Trying to access config files
Web App Attack
🇸🇪
vaia.cloud
2026-06-13 22:31:02
(1 day ago)
trying wp-login.php/xmlrpc.php 35 times in 1 minutes
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:56:32
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:56:28.744369 2026] [security2:error] [pid 15748:tid 15748] [client 176.29.159.164:31744] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|paleopathologist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "paleopathologist.com"] [uri "/xmlrpc.php"] [unique_id "ai3SDInECK_FHUGIxEWJPAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 20:03:36
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 176.29.159.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:03:33.117651 2026] [security2:error] [pid 2746:tid 2746] [client 176.29.159.164:16646] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 176.29.159.164 (+1 hits since last alert)|kotelbarmitzvah.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kotelbarmitzvah.com"] [uri "/xmlrpc.php"] [unique_id "ai23ldoa8e20b130xjf7qgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack