🇺🇸
TPI-Abuse
2026-10-05 14:36:55
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:36:51.331169 2026] [security2:error] [pid 13969:tid 13969] [client 179.124.199.198:48106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dezdezero.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dezdezero.com"] [uri "/"] [unique_id "asO2A98InvxJXIfjRptcPAAAABA"], referer: https://backlinksforwebsite.website/dir/seo-backlink-services-54101
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 23:25:49
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 19:25:45.555375 2026] [security2:error] [pid 5869:tid 5869] [client 179.124.199.198:53064] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.124.199.198 (+1 hits since last alert)|d-sinema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d-sinema.com"] [uri "/xmlrpc.php"] [unique_id "ak7ceVKrkjtxkVgi4wZUQwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 18:48:26
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:48:20.685461 2026] [security2:error] [pid 16539:tid 16539] [client 179.124.199.198:56750] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.124.199.198 (+1 hits since last alert)|arthuryeung.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "arthuryeung.net"] [uri "/xmlrpc.php"] [unique_id "ak6bdP3Oof84LdM91TUlTQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 18:48:13
(3 months ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 18:20:33
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 14:20:26.704104 2026] [security2:error] [pid 24635:tid 24635] [client 179.124.199.198:61831] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.124.199.198 (+1 hits since last alert)|midcityrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midcityrotary.org"] [uri "/xmlrpc.php"] [unique_id "ai7w6gK9puvGSjWMnRicYAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 17:16:45
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 179.124.199.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 13:16:38.100386 2026] [security2:error] [pid 27635:tid 27638] [client 179.124.199.198:56676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.124.199.198 (+1 hits since last alert)|chaoticperception.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "chaoticperception.com"] [uri "/xmlrpc.php"] [unique_id "ai7h9pw7yhQNCSxV8YzBxAAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
reznekcs
2026-06-14 17:13:40
(3 months ago)
F2B wordpress ban. Logs: 179.124.199.198 - - [14/Jun/2026:19:13:28 +0200] "POST /xmlrpc.php HTTP/1.1 ...
show more
F2B wordpress ban. Logs: 179.124.199.198 - - [14/Jun/2026:19:13:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 458 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)"
179.124.199.198 - - [14/Jun/2026:19:13:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 458 "-" "Jetpack by WordPress.com"
show less
Brute-Force
Web App Attack
🇩🇪
SMARTNET
2026-05-27 06:03:53
(4 months ago)
Aisuru(Mirai variant) DDoS | Incident ID: 6ed80dcf-192e-41b9-b3cf-8e7356812aa9
DDoS Attack
🇮🇹
Progetto1
2026-03-29 07:01:05
(6 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇨🇭
teamsecure
2026-03-24 22:36:03
(6 months ago)
Banned for trying to access xmlrpc
Web App Attack
🇮🇹
VHosting
2025-12-22 20:42:22
(9 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
2025-11-25 23:16:21
(10 months ago)
scanning http requests from known botnet
Web App Attack
2025-10-15 08:08:20
(11 months ago)
Distributed web crawl (like Mellowtel), likely illicit scraping of AI training data to bypass firewa ...
show more
Distributed web crawl (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions (/forums/forums/thread-post.asp?action=reply&replyto=172878%22e%3Dyes)
show less
Bad Web Bot
Exploited Host
🇳🇱
exxos
2025-08-08 19:11:57
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-08-04 22:10:01
(1 year ago)
HTTP1.x attacks
DDoS Attack
