🇫🇷
tecnicorioja
2026-08-25 22:02:18
(9 hours ago)
POST /xmlrpc.php [25/Aug/2026:09:28:17
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-08-25 12:42:34
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:42:29.943589 2026] [security2:error] [pid 4061:tid 4061] [client 195.174.124.44:4118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 195.174.124.44 (+1 hits since last alert)|theyoungstrategist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theyoungstrategist.com"] [uri "/xmlrpc.php"] [unique_id "ao2NtR13K_iIq1sPpbmf0gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 08:42:23
(23 hours ago)
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:42:16.473154 2026] [security2:error] [pid 8303:tid 8303] [client 195.174.124.44:3582] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 195.174.124.44 (+1 hits since last alert)|customhumanrobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "customhumanrobots.com"] [uri "/xmlrpc.php"] [unique_id "ao1VaEWEhRRs09k_LPcXbgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 17:48:20
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:48:15.948774 2026] [security2:error] [pid 26573:tid 26573] [client 195.174.124.44:4560] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 195.174.124.44 (+1 hits since last alert)|gisur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gisur.com"] [uri "/xmlrpc.php"] [unique_id "aoyD330RFupbh5hfye062wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 16:10:37
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 12:10:33.242791 2026] [security2:error] [pid 14750:tid 14750] [client 195.174.124.44:1727] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 195.174.124.44 (+1 hits since last alert)|usaenquirer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "usaenquirer.com"] [uri "/xmlrpc.php"] [unique_id "aoxs-SVIHBrW3q2SnyATSwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-24 15:08:05
(1 day ago)
(xmlrpc) Apache: Failed xmlrpc access from 195.174.124.44 (TR/Turkey/-): 10 in the last 3600 secs (0 ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 195.174.124.44 (TR/Turkey/-): 10 in the last 3600 secs (0-201)
show less
Hacking
🇮🇹
CoreTech srl
2026-08-24 10:53:57
(1 day ago)
cloudlinux2 fail2ban: 2026-08-24 12:48:58,091 fail2ban.filter [1464]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-24 12:48:58,091 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 45.131.195.220 - 2026-08-24 12:48:56cloudlinux2 fail2ban: 2026-08-24 12:48:58,088 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 45.131.195.234 - 2026-08-24 12:48:56cloudlinux2 fail2ban: 2026-08-24 12:49:23,373 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 104.28.155.89cloudlinux2 fail2ban: 2026-08-24 12:51:02,095 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 129.208.123.48 - 2026-08-24 12:51:01cloudlinux2 fail2ban: 2026-08-24 12:51:11,421 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.174.124.44 - 2026-08-24 12:51:11cloudlinux2 fail2ban: 2026-08-24 12:52:16,373 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 129.208.123.48 - 2026-08-24 12:52:16cloudlinux2 fail2ban: 2026-08-24 12:52:26,699 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.174.124.44 - 2026-08-24 12:52:26cloudlinux2 fai
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 07:59:52
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 195.174.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:59:45.904682 2026] [security2:error] [pid 22983:tid 22983] [client 195.174.124.44:3107] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 195.174.124.44 (+1 hits since last alert)|abilityengraving.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abilityengraving.com"] [uri "/xmlrpc.php"] [unique_id "aov58TViK_xLR5wT7fmDZQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack