🇫🇷
LRob
2026-11-13 13:14:54
UTC ·
(3 hours ago)
WordPress attack-tool calls | method: GET | path: /xmlrpc.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
Web App Attack
Hacking
🇪🇸
librebit
2026-11-10 03:28:59
UTC ·
(3 days ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-11-08 04:19:23
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-01 14:29:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 09:29:10.517584 2026] [security2:error] [pid 10958:tid 10958] [client 185.201.137.229:6293 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 09:29:10.517584 2026] [security2:error] [pid 10958:tid 10958] [client 185.201.137.229:62939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewforum.php"] [unique_id "audMtsJ5njp-3igUGhulIQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:04:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:04:34.763251 2026] [security2:error] [pid 14030:tid 14030] [client 185.201.137.229:3032 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:04:34.763251 2026] [security2:error] [pid 14030:tid 14030] [client 185.201.137.229:30329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||somuchtoread.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "somuchtoread.com"] [uri "/2026.php"] [unique_id "auJjYg3j2JsqYhiKPUx_iAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 09:05:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 05:05:36.775149 2026] [security2:error] [pid 20977:tid 20997] [client 185.201.137.229:5806 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 05:05:36.775149 2026] [security2:error] [pid 20977:tid 20997] [client 185.201.137.229:58065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||maestrosoler.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maestrosoler.com"] [uri "/recitals_&_concerts.htm"] [unique_id "at3GYHJ6hwSKtWzgwYyd6gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 22:13:21
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 18:13:15.970217 2026] [security2:error] [pid 3073:tid 3073] [client 185.201.137.229:43733] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 18:13:15.970217 2026] [security2:error] [pid 3073:tid 3073] [client 185.201.137.229:43733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundaciondamashcc.org.ec|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundaciondamashcc.org.ec"] [uri "/gastroenterologia"] [unique_id "ap3ley_3AaNZaHOsBi6s_gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 23:42:54
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 19:42:51.234043 2026] [security2:error] [pid 2518448:tid 2518448] [client 185.201.137.229: ...
show more
(mod_security) mod_security (id:210492) triggered by 185.201.137.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 19:42:51.234043 2026] [security2:error] [pid 2518448:tid 2518448] [client 185.201.137.229:17747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djemjaybeats.com"] [uri "/.git/./config"] [unique_id "anJ4-4CoZwON89VSo4EYZgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-06-24 08:31:15
UTC ·
(4 months ago)
Web App Attack
Web App Attack
🇺🇸
myagent.site
2026-03-21 05:42:24
UTC ·
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
octageeks.com
2026-03-20 04:07:00
UTC ·
(7 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇺🇸
myagent.site
2026-03-18 17:51:32
UTC ·
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇨🇭
backslash
2026-03-14 12:36:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
