🇳🇱
wlt-blocker
2026-07-09 10:15:10
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 07:45:54
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 03:45:50.048550 2026] [security2:error] [pid 26982:tid 26982] [client 213.109.233.210:47301] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 213.109.233.210 (+1 hits since last alert)|fattoria-rendena.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fattoria-rendena.it"] [uri "/xmlrpc.php"] [unique_id "ak9RrrqWewRTeokS-dbu5wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 07:43:47
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 03:43:42.050967 2026] [security2:error] [pid 13521:tid 13521] [client 213.109.233.210:43385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 213.109.233.210 (+1 hits since last alert)|desertautoworks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "desertautoworks.com"] [uri "/xmlrpc.php"] [unique_id "ak3_rrik1poQ4R8qaguf7AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 06:46:49
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 213.109.233.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:46:45.781198 2026] [security2:error] [pid 7241:tid 7241] [client 213.109.233.210:59297] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 213.109.233.210 (+1 hits since last alert)|hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hvacmechanalysis.com"] [uri "/xmlrpc.php"] [unique_id "ak3yVe1e6H3kAoK5157ufQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 12:39:12
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇩🇪
final
2024-12-12 16:35:55
(1 year ago)
Phishing
Email Spam
Spoofing
2024-10-28 17:53:10
(1 year ago)
Ports: 143,993; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇳🇱
vestibtech
2021-04-30 03:33:13
(5 years ago)
Apr 30 01:31:43 Host-KLAX-C amavis[346644]: (346644-14) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK ...
show more
Apr 30 01:31:43 Host-KLAX-C amavis[346644]: (346644-14) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [213.109.233.210] [213.109.233.210] <[email protected] > -> <[email protected] >, Queue-ID: E9C601BD0C6, Message-ID: <89E6AAF8ACC5B4FE91DD8FDBB2C389E6@s432eb3512m>, mail_id: 6C-plfvWaZX7, Hits: 23.241, size: 5611, 666 ms
Apr 30 01:33:13 Host-KLAX-C amavis[346647]: (346647-14) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [213.109.233.210] [213.109.233.210] <[email protected] > -> <[email protected] >, Queue-ID: BD2A71BD0C6, Message-ID: <75C7FA7CA648412092AF29F31D1475C7@xf63fuqe>, mail_id: 5mrATGOubMPv, Hits: 24.487, size: 5608, 382 ms
...
show less
Email Spam