🇧🇾
lns.bz
2026-07-02 18:48:33
(1 hour ago)
Banned for trying to access xmlrpc [BY]
Web App Attack
🇪🇸
masterguru
2026-07-02 16:47:50
(3 hours ago)
(xmlrpc) Failed xmlrpc access from 86.98.155.200 (AE/United Arab Emirates/bba-86-98-155-200.alshamil ...
show more
(xmlrpc) Failed xmlrpc access from 86.98.155.200 (AE/United Arab Emirates/bba-86-98-155-200.alshamil.net.ae): 5 in the last 3600 secs (0-122)
show less
Hacking
🇺🇸
TPI-Abuse
2026-07-02 15:48:27
(4 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 11:48:19.584304 2026] [security2:error] [pid 9324:tid 9324] [client 86.98.155.200:59447] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|esysapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "esysapps.com"] [uri "/xmlrpc.php"] [unique_id "akaIQ0FPgl6uZDo4qRi37wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 13:03:02
(6 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 09:02:53.401745 2026] [security2:error] [pid 11550:tid 11550] [client 86.98.155.200:63140] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|deborahbein.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "deborahbein.com"] [uri "/xmlrpc.php"] [unique_id "akZhfUp6JyoPU2K3iEVOowAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 05:38:11
(14 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:38:03.015661 2026] [security2:error] [pid 20828:tid 20929] [client 86.98.155.200:53372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|reghay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reghay.com"] [uri "/xmlrpc.php"] [unique_id "akX5O_RQWBK3B4TW0iGmXQAAAcw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-02 03:06:36
(16 hours ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 16:58:33
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 12:58:28.593863 2026] [security2:error] [pid 19007:tid 19007] [client 86.98.155.200:51693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|brianwhitty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brianwhitty.com"] [uri "/xmlrpc.php"] [unique_id "akVHNOqkHxWCUKbM3kfQ0wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-07-01 13:36:58
(1 day ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 04:12:20
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:12:15.637871 2026] [security2:error] [pid 23008:tid 23008] [client 86.98.155.200:59998] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|medusakenya.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "akSTn2xkxVgayhZeXd79JgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-30 17:06:05
(2 days ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 08:18:13
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:18:06.786193 2026] [security2:error] [pid 24340:tid 24340] [client 86.98.155.200:58614] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|richmondrents.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "richmondrents.com"] [uri "/xmlrpc.php"] [unique_id "akN7vhJS0i1yEE4RVmEdWQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 07:15:10
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.a ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.155.200 (bba-86-98-155-200.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 03:15:07.090951 2026] [security2:error] [pid 5002:tid 5002] [client 86.98.155.200:64926] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.155.200 (+1 hits since last alert)|cmcnow.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cmcnow.net"] [uri "/xmlrpc.php"] [unique_id "akNs-13x8tgYOrHgRfJ89wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-30 04:24:25
(2 days ago)
[da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; sa ...
show more
[da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack