2026-07-04 06:06:18
(3 days ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 13:21:54
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the ...
show more
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 09:21:47.787863 2026] [security2:error] [pid 17745:tid 17745] [client 45.70.167.122:52924] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.70.167.122 (+1 hits since last alert)|milliondollarbelt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "milliondollarbelt.com"] [uri "/xmlrpc.php"] [unique_id "ake3a27L7oYEGSOShrYapwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-03 10:20:26
(4 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-07-03 04:14:13
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the ...
show more
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 00:14:06.159991 2026] [security2:error] [pid 10888:tid 10888] [client 45.70.167.122:12341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.70.167.122 (+1 hits since last alert)|jimrichardart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jimrichardart.com"] [uri "/xmlrpc.php"] [unique_id "akc3DjpibqYs4gUJSYODNAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-03 02:06:05
(4 days ago)
Trying to access config files
Web App Attack
2026-07-03 00:28:10
(4 days ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-07-02 23:12:56
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the ...
show more
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 19:12:51.717229 2026] [security2:error] [pid 6253:tid 6280] [client 45.70.167.122:52888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.70.167.122 (+1 hits since last alert)|vancekelly.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vancekelly.com"] [uri "/xmlrpc.php"] [unique_id "akbwc6MyZ2KsT4p6R8YVLAAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 15:03:05
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the ...
show more
(mod_security) mod_security (id:240335) triggered by 45.70.167.122 (nt-cgn.wlinks.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 11:02:57.174675 2026] [security2:error] [pid 11185:tid 11185] [client 45.70.167.122:60810] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.70.167.122 (+1 hits since last alert)|caymancline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "caymancline.com"] [uri "/xmlrpc.php"] [unique_id "akZ9ofBiih8R1Z4kAYhRzwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-07-01 10:50:40
(6 days ago)
2026-07-01T12:50:38.460481+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown ...
show more
2026-07-01T12:50:38.460481+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown user 5fm from 45.70.167.122
show less
Web App Attack
🇫🇷
dynamix
2026-07-01 05:46:18
(6 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2025-11-20 04:09:45
(7 months ago)
scanning http requests from known botnet
Web App Attack
🇪🇸
Global Cyber Police
2025-07-28 06:27:42
(11 months ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Global Cyber Police
2025-07-28 06:27:42
(11 months ago)
Malicious bot activity detected: Hitting honeypot page. Part of massive botnet.
DDoS Attack
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Web App Attack
2025-03-22 04:48:00
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH