🇺🇸
TPI-Abuse
2026-06-16 06:11:10
(2 hours ago)
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:11:02.645551 2026] [security2:error] [pid 14451:tid 14451] [client 45.128.123.156:54336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.128.123.156 (+1 hits since last alert)|localpetsitters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "localpetsitters.com"] [uri "/xmlrpc.php"] [unique_id "ajDo9pXoEX2mrdF1rhEYfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
F242
2026-06-16 04:38:24
(4 hours ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 03:51:16
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:51:08.948769 2026] [security2:error] [pid 21450:tid 21450] [client 45.128.123.156:39991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.128.123.156 (+1 hits since last alert)|greatchristianadventure.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greatchristianadventure.com"] [uri "/xmlrpc.php"] [unique_id "ajDILCm2kP4cXk2Mz2FY6QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 03:09:37
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 23:09:29.281654 2026] [security2:error] [pid 28425:tid 28445] [client 45.128.123.156:55602] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.128.123.156 (+1 hits since last alert)|41bravo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "41bravo.com"] [uri "/xmlrpc.php"] [unique_id "ajC-ada2OvSXS3QMbbhlNwAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-06-16 01:00:37
(8 hours ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 19:26:56
(13 hours ago)
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 45.128.123.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:26:53.161802 2026] [security2:error] [pid 27762:tid 27762] [client 45.128.123.156:52618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.128.123.156 (+1 hits since last alert)|thingstodonude.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thingstodonude.com"] [uri "/xmlrpc.php"] [unique_id "ajBR_dVZQ21T_TjQT0sY_AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-15 18:55:42
(14 hours ago)
(wordpress) Failed wordpress login from 45.128.123.156 (IQ/Iraq/-): (CF_ENABLE)
Brute-Force
2026-06-15 16:12:13
(16 hours ago)
Attac
Brute-Force
🇲🇾
Rizzy
2026-06-15 12:05:25
(21 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
ersei.net
2026-05-30 15:49:29
(2 weeks ago)
Web app exploiting
Web App Attack
2026-05-16 20:28:48
(4 weeks ago)
Unauthorized connection attempt on Port 2323
Port Scan
Hacking
Exploited Host
2026-05-02 22:46:21
(1 month ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less
Exploited Host
Bad Web Bot
🇺🇸
kosada.com
2026-03-12 02:18:47
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-02-24 16:30:09
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇰
TransAdvice-Abuse
2025-12-26 06:52:32
(5 months ago)
IRC SPAM/Flood
DDoS Attack