๐บ๐ธ
TPI-Abuse
2026-06-07 20:41:49
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 16:41:43.455740 2026] [security2:error] [pid 24832:tid 24859] [client 217.164.119.114:62796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|thestoryofmyvoice.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thestoryofmyvoice.com"] [uri "/xmlrpc.php"] [unique_id "aiXXh0c_wxJ1ghbg09FzPAAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-07 20:20:21
(2 weeks ago)
Attac
Brute-Force
๐ซ๐ท
dynamix
2026-06-07 20:18:49
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 18:43:06
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:43:01.607599 2026] [security2:error] [pid 9897:tid 9897] [client 217.164.119.114:59641] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|weddingmusicguitar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "weddingmusicguitar.com"] [uri "/xmlrpc.php"] [unique_id "aiW7tV62xuaUDjS220tipwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 15:35:58
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:35:55.381733 2026] [security2:error] [pid 29314:tid 29314] [client 217.164.119.114:57171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|geodogs.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geodogs.org"] [uri "/xmlrpc.php"] [unique_id "aiWP2xjZYxjyGfSk_KAuxAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 14:34:58
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:34:51.961742 2026] [security2:error] [pid 28402:tid 28422] [client 217.164.119.114:57339] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|neotienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "neotienda.com"] [uri "/xmlrpc.php"] [unique_id "aiWBi-TZfrVd79uCMTrIFwAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-05 18:41:12
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 14:41:06.717195 2026] [security2:error] [pid 6689:tid 6689] [client 217.164.119.114:57791] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|equipoperu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "equipoperu.org"] [uri "/xmlrpc.php"] [unique_id "aiMYQtCUMU2-sruqZJLt5AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-05 13:51:36
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 09:51:29.219978 2026] [security2:error] [pid 17826:tid 17826] [client 217.164.119.114:57832] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|kaldaragroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kaldaragroup.com"] [uri "/xmlrpc.php"] [unique_id "aiLUYVtYzd6RCaHXaFasFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-04 19:53:10
(2 weeks ago)
Attac
Brute-Force
๐บ๐ธ
TAY
2026-06-04 17:07:35
(2 weeks ago)
217.164.119.114 - - [05/Jun/2026:01:07:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4404 "-" "Jetpack b ...
show more
217.164.119.114 - - [05/Jun/2026:01:07:12 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4404 "-" "Jetpack by WordPress.com"
217.164.119.114 - - [05/Jun/2026:01:07:22 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4404 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
217.164.119.114 - - [05/Jun/2026:01:07:34 +0800] "POST /xmlrpc.php HTTP/1.1" 200 4404 "-" "WordPress.com; https://wordpress.com"
...
show less
Brute-Force
๐ณ๐ฑ
debestelapp
2026-06-04 16:10:06
(2 weeks ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 19:27:54
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 15:27:50.512661 2026] [security2:error] [pid 3073:tid 3073] [client 217.164.119.114:53482] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|odinathletes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odinathletes.com"] [uri "/xmlrpc.php"] [unique_id "aiCANl0SHHsiGyLxz0QjiwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-03 19:24:51
(2 weeks ago)
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 16:52:36
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.n ...
show more
(mod_security) mod_security (id:240335) triggered by 217.164.119.114 (bba-217-164-119-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 12:52:28.192387 2026] [security2:error] [pid 13047:tid 13047] [client 217.164.119.114:61263] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 217.164.119.114 (+1 hits since last alert)|lusineweb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lusineweb.com"] [uri "/xmlrpc.php"] [unique_id "aiBbzCXCBtLk5GfbeJ6V7wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TAY
2026-06-03 16:50:20
(2 weeks ago)
217.164.119.114 - - [04/Jun/2026:00:49:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5867 "-" "Jetpack b ...
show more
217.164.119.114 - - [04/Jun/2026:00:49:58 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5867 "-" "Jetpack by WordPress.com"
217.164.119.114 - - [04/Jun/2026:00:50:08 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5867 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
217.164.119.114 - - [04/Jun/2026:00:50:19 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5867 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force