🇺🇸
TPI-Abuse
2026-07-12 19:28:56
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 15:28:49.457781 2026] [security2:error] [pid 18396:tid 18396] [client 111.92.145.64:42640] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|produktives.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "produktives.com"] [uri "/xmlrpc.php"] [unique_id "alPq8ZujU-xyUpbsZWOiaAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-12 18:16:39
(2 days ago)
[redacted] 111.92.145.64 - - [12/Jul/2026:20:15:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ...
show more
[redacted] 111.92.145.64 - - [12/Jul/2026:20:15:56 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 111.92.145.64 - - [12/Jul/2026:20:16:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 111.92.145.64 - - [12/Jul/2026:20:16:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 111.92.145.64 - - [12/Jul/2026:20:16:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 111.92.145.64 - - [12/Jul/2026:20:16:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
...
show less
Hacking
Web App Attack
🇪🇸
alferez
2026-07-12 18:16:17
(2 days ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-07-12 17:27:03
(2 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-12 17:17:19
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 13:17:10.543592 2026] [security2:error] [pid 21979:tid 22013] [client 111.92.145.64:42060] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|chaoticperception.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "chaoticperception.com"] [uri "/xmlrpc.php"] [unique_id "alPMFgRH1-Dn_Gmi-BCMXwAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-07-12 16:46:52
(2 days ago)
(xmlrpc) Failed xmlrpc access from 111.92.145.64 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
rh24
2026-07-12 16:42:59
(2 days ago)
(wordpress) Failed wordpress login from 111.92.145.64 (PK/Pakistan/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-12 16:24:30
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 12:24:24.042349 2026] [security2:error] [pid 19061:tid 19061] [client 111.92.145.64:42506] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|citizensforsanity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "citizensforsanity.com"] [uri "/xmlrpc.php"] [unique_id "alO_uLwoveh-leOgC5H-qQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-12 16:23:17
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-12 15:44:40
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 11:44:32.738023 2026] [security2:error] [pid 11727:tid 11727] [client 111.92.145.64:42948] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|yogawithbubba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yogawithbubba.com"] [uri "/xmlrpc.php"] [unique_id "alO2YNoIYbW2VQuXKj3_9wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-07-12 15:15:21
(2 days ago)
23.278 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-12 15:02:40
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 11:02:30.922881 2026] [security2:error] [pid 14458:tid 14472] [client 111.92.145.64:42221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|tomithai.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomithai.com"] [uri "/xmlrpc.php"] [unique_id "alOshkxhXWjm1zBhcWS2EgAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-07-12 14:15:10
(2 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-12 12:38:18
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 111.92.145.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 08:38:08.682200 2026] [security2:error] [pid 16558:tid 16558] [client 111.92.145.64:42136] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 111.92.145.64 (+1 hits since last alert)|towlesilvapsychotherapy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "towlesilvapsychotherapy.com"] [uri "/xmlrpc.php"] [unique_id "alOKsH4T71FrpQSghbjtGAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-12 12:36:37
(2 days ago)
Bad Web Bot
Web App Attack