🇨🇦
polycoda
2026-07-11 16:02:41
(1 day ago)
AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 15:31:17
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 11:31:11.179078 2026] [security2:error] [pid 28137:tid 28137] [client 103.240.234.36:21457] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|drayvian.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drayvian.com"] [uri "/xmlrpc.php"] [unique_id "alJhv_fAMrV5g5eQMpv3oAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 12:28:16
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:28:11.819654 2026] [security2:error] [pid 18908:tid 18908] [client 103.240.234.36:21544] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|keychainfilms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "keychainfilms.com"] [uri "/xmlrpc.php"] [unique_id "alI220BbSxZq22L5qLOEdAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 11:35:14
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 07:35:07.454349 2026] [security2:error] [pid 3768:tid 3768] [client 103.240.234.36:22528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|odinathletes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odinathletes.com"] [uri "/xmlrpc.php"] [unique_id "alIqa1IyH-jhpAJR9WFqDgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-07-11 07:32:05
(1 day ago)
Wordfence waf block on ncrsol
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 07:29:20
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 03:29:16.870429 2026] [security2:error] [pid 865:tid 865] [client 103.240.234.36:23043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|nebraskaadaptivesports.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nebraskaadaptivesports.org"] [uri "/xmlrpc.php"] [unique_id "alHwzEDyBFLSGVu8c3BZEgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-07-11 06:55:28
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 05:56:58
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 01:56:50.603227 2026] [security2:error] [pid 25513:tid 25513] [client 103.240.234.36:23176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|plazahacienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "plazahacienda.com"] [uri "/xmlrpc.php"] [unique_id "alHbItglRS4gJzL-orh0AQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-07-11 03:50:46
(1 day ago)
(wordpress) Failed wordpress login from 103.240.234.36 (IN/India/234.240.103.in-addr.tripleplay.in)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-11 01:38:51
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 21:38:44.615456 2026] [security2:error] [pid 29530:tid 29530] [client 103.240.234.36:22379] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|persnicketyinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "persnicketyinc.com"] [uri "/xmlrpc.php"] [unique_id "alGepOW6B3YlL_BaB7qHUAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-10 21:18:54
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-07-10 12:33:45
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 08:42:36
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 04:42:32.555406 2026] [security2:error] [pid 28009:tid 28009] [client 103.240.234.36:22300] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|jbernsteinpc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jbernsteinpc.com"] [uri "/xmlrpc.php"] [unique_id "alCweEU8S2E-mIiuRe_qEgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 05:57:44
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay. ...
show more
(mod_security) mod_security (id:240335) triggered by 103.240.234.36 (234.240.103.in-addr.tripleplay.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 01:57:38.689506 2026] [security2:error] [pid 12961:tid 12961] [client 103.240.234.36:23153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.240.234.36 (+1 hits since last alert)|pharmaceuticalsalescareerhub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pharmaceuticalsalescareerhub.com"] [uri "/xmlrpc.php"] [unique_id "alCJ0hh9p-IGxdyGb94bJAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-23 06:21:06
(5 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in email-link.asp
show less
Bad Web Bot
Exploited Host