🇫🇷
bigorre.org
2026-07-19 14:50:24
(6 days ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-19 11:52:34
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:52:27.958381 2026] [security2:error] [pid 8223:tid 8223] [client 103.153.130.52:58697] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.153.130.52 (+1 hits since last alert)|frelsburg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "frelsburg.com"] [uri "/xmlrpc.php"] [unique_id "aly6ezrkTVzWXeapk6dL5QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
DonAtari
2026-07-19 06:28:45
(6 days ago)
DShield firewall scan - TCP to port 8080
Brute-Force
SSH
🇫🇷
bigorre.org
2026-07-16 15:23:05
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
kosada.com
2026-07-11 22:26:28
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 07:33:35
(3 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-25 14:39:35
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 10:39:29.427728 2026] [security2:error] [pid 30716:tid 30716] [client 103.153.130.52:59945] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.153.130.52 (+1 hits since last alert)|cbrtome.cl|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cbrtome.cl"] [uri "/xmlrpc.php"] [unique_id "aj09odMi2g5_Bd58BTREQAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 13:08:19
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:08:13.230288 2026] [security2:error] [pid 15943:tid 15943] [client 103.153.130.52:59323] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.153.130.52 (+1 hits since last alert)|phoboschildren.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "phoboschildren.com"] [uri "/xmlrpc.php"] [unique_id "aj0oPSY9Ta6zNBICx4ISVQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-24 15:24:36
(1 month ago)
(wordpress) Failed wordpress login from 103.153.130.52 (BD/Bangladesh/-)
Brute-Force
🇫🇷
masterguru
2026-06-24 10:21:52
(1 month ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇩🇪
grassau.com
2026-06-21 08:17:06
(1 month ago)
(wordpress) Failed wordpress login from 103.153.130.52 (BD/Bangladesh/-/-/-)
Brute-Force
2026-06-18 06:40:32
(1 month ago)
Attac
Brute-Force
🇩🇪
grassau.com
2026-06-16 09:10:22
(1 month ago)
(wordpress) Failed wordpress login from 103.153.130.52 (BD/Bangladesh/-/-/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-05-16 07:31:15
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 103.153.130.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 03:31:07.158172 2026] [security2:error] [pid 5323:tid 5323] [client 103.153.130.52:50096] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.153.130.52 (+1 hits since last alert)|ssion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ssion.com"] [uri "/xmlrpc.php"] [unique_id "aggdO4JZYyJRL1lBEK7uIwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack