🇳🇱
Site.eu
2026-05-22 20:30:32
(4 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇳🇱
debestelapp
2026-05-22 19:05:08
(4 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 17:18:08
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 13:18:00.746741 2026] [security2:error] [pid 17370:tid 17370] [client 179.54.100.255:64193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.54.100.255 (+1 hits since last alert)|3beeze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "3beeze.com"] [uri "/xmlrpc.php"] [unique_id "ahCPyBtNtFIntLzl6aVX-QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-05-22 14:40:04
(4 months ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 10:27:34
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:27:26.976477 2026] [security2:error] [pid 17767:tid 17767] [client 179.54.100.255:62443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.54.100.255 (+1 hits since last alert)|jazziiafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jazziiafoundation.org"] [uri "/xmlrpc.php"] [unique_id "ahAvjgVm1XnMabIZYZZyvQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-21 19:54:13
(4 months ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-05-21 13:05:23
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 09:05:18.743025 2026] [security2:error] [pid 32310:tid 32310] [client 179.54.100.255:50219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.54.100.255 (+1 hits since last alert)|tonydelov.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tonydelov.com"] [uri "/xmlrpc.php"] [unique_id "ag8DDkayDVK6nnrrosxX3wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-05-20 20:28:54
(4 months ago)
Wordpress Vunerability attack
Web App Attack
🇳🇱
ConsulHosting
2026-05-20 17:41:54
(5 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
Apache
2026-05-20 14:25:52
(5 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (BR/Brazil/-): 5 in the last 300 ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (BR/Brazil/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇺🇸
EarthAsylum
2026-05-20 14:21:50
(5 months ago)
Repeated exploit attempts on WordPress entry points (prohibited XML method)
Brute-Force
Web App Attack
2026-05-20 13:52:20
(5 months ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-05-19 17:46:41
(5 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:46:37.531113 2026] [security2:error] [pid 11269:tid 11269] [client 179.54.100.255:53830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.54.100.255 (+1 hits since last alert)|xcarsubscription.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xcarsubscription.com"] [uri "/xmlrpc.php"] [unique_id "agyh_Ww22XfXbxWPOykHqwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 17:15:46
(5 months ago)
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 179.54.100.255 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 13:15:38.224896 2026] [security2:error] [pid 3526:tid 3526] [client 179.54.100.255:60151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 179.54.100.255 (+1 hits since last alert)|ronjamestelevision.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ronjamestelevision.com"] [uri "/xmlrpc.php"] [unique_id "agyaunz0zcdpRKABhF8YZgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-05-19 10:40:01
(5 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack