🇺🇸
TPI-Abuse
2026-06-11 03:41:54
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 98.98.9.39 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.9.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 23:41:47.702645 2026] [security2:error] [pid 3021:tid 3021] [client 98.98.9.39:58061] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.9.39 (+1 hits since last alert)|odysseydogasporlari.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "aioue26nBKAh20GZEYdghgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 23:48:51
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 98.98.9.39 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.9.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:48:44.988002 2026] [security2:error] [pid 8555:tid 8555] [client 98.98.9.39:58008] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.9.39 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ain33NjXrxtWFceCQefvxQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
[email protected]
2026-05-05 11:46:14
(2 months ago)
98.98.9.39 - - [05/May/2026:09:34:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (W ...
show more
98.98.9.39 - - [05/May/2026:09:34:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇮🇹
[email protected]
2026-05-05 07:34:27
(2 months ago)
[Tue May 05 09:34:26.238354 2026] [authz_core:error] [pid 1943089:tid 1943176] [client 98.98.9.39:56 ...
show more
[Tue May 05 09:34:26.238354 2026] [authz_core:error] [pid 1943089:tid 1943176] [client 98.98.9.39:56209] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php
...
show less
Brute-Force
Web App Attack
🇮🇹
[email protected]
2026-04-22 00:11:23
(2 months ago)
98.98.9.39 - - [22/Apr/2026:01:10:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (W ...
show more
98.98.9.39 - - [22/Apr/2026:01:10:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇮🇹
[email protected]
2026-04-21 23:10:10
(2 months ago)
[Wed Apr 22 01:10:08.876254 2026] [authz_core:error] [pid 1610956:tid 1611065] [client 98.98.9.39:57 ...
show more
[Wed Apr 22 01:10:08.876254 2026] [authz_core:error] [pid 1610956:tid 1611065] [client 98.98.9.39:57161] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php
...
show less
Brute-Force
Web App Attack
🇺🇸
bigscoots.com
2026-01-13 15:57:00
(6 months ago)
(smtpauth) Failed SMTP AUTH login from 98.98.9.39 (CL/Chile/-): 5 in the last 3600 secs; Ports: 25,4 ...
show more
(smtpauth) Failed SMTP AUTH login from 98.98.9.39 (CL/Chile/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-01-13 10:56:21 dovecot_plain authenticator failed for H=([192.168.1.86]) [98.98.9.39]:61124: 535 Incorrect authentication data ([email protected] )
2026-01-13 10:56:27 dovecot_login authenticator failed for H=([192.168.1.86]) [98.98.9.39]:61124: 535 Incorrect authentication data ([email protected] )
2026-01-13 10:56:35 dovecot_plain authenticator failed for H=([192.168.1.86]) [98.98.9.39]:62570: 535 Incorrect authentication data ([email protected] )
2026-01-13 10:56:37 dovecot_login authenticator failed for H=([192.168.1.86]) [98.98.9.39]:62570: 535 Incorrect authentication data ([email protected] )
2026-01-13 10:57:00 dovecot_plain authenticator failed for H=([192.168.1.86]) [98.98.9.39]:55006: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
2025-10-05 20:01:00
(9 months ago)
Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇹🇷
Doruk
2025-06-06 03:20:01
(1 year ago)
Unauthorized connection attempt
Brute-Force