🇺🇸
TPI-Abuse
2026-06-24 01:11:36
(4 minutes ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:11:32.151342 2026] [security2:error] [pid 29346:tid 29346] [client 112.205.46.62:57642] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|waterjetsolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "waterjetsolutions.com"] [uri "/xmlrpc.php"] [unique_id "ajsuxFTzkj88ci0gvxzDLgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-24 00:26:29
(49 minutes ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
PH/Philippines/112.205.46.62.pldt.net
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 02:41:53
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 22:41:49.477691 2026] [security2:error] [pid 16886:tid 16886] [client 112.205.46.62:53572] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|instalatoribucuresti.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "instalatoribucuresti.com"] [uri "/xmlrpc.php"] [unique_id "ajnybYQ8n3YUEBR-alfmhAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-22 06:35:36
(1 day ago)
(wordpress) Failed wordpress login from 112.205.46.62 (PH/Philippines/112.205.46.62.pldt.net): (CF_ ...
show more
(wordpress) Failed wordpress login from 112.205.46.62 (PH/Philippines/112.205.46.62.pldt.net): (CF_ENABLE)
show less
Brute-Force
🇪🇸
masterguru
2026-06-22 06:09:03
(1 day ago)
(xmlrpc) Failed xmlrpc access from 112.205.46.62 (PH/Philippines/112.205.46.62.pldt.net): 5 in the l ...
show more
(xmlrpc) Failed xmlrpc access from 112.205.46.62 (PH/Philippines/112.205.46.62.pldt.net): 5 in the last 3600 secs (0-122)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-22 04:03:43
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 00:03:36.461082 2026] [security2:error] [pid 24351:tid 24351] [client 112.205.46.62:61871] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|caymancline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "caymancline.com"] [uri "/xmlrpc.php"] [unique_id "aji0GHXegBJ894M5JnnmngAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 05:23:53
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 01:23:46.504988 2026] [security2:error] [pid 3077:tid 3077] [client 112.205.46.62:52189] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|reelvisionboard.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "reelvisionboard.com"] [uri "/xmlrpc.php"] [unique_id "ajOA4rc8YRKQfOjocV42MQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-18 03:17:23
(5 days ago)
(xmlrpc_405) XMLRPC-Bot 405 112.205.46.62 (PH/Philippines/112.205.46.62.pldt.net)
Hacking
🇺🇸
TPI-Abuse
2026-06-18 03:09:15
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 23:09:08.032215 2026] [security2:error] [pid 25706:tid 25706] [client 112.205.46.62:63918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|georgegourmet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "georgegourmet.com"] [uri "/xmlrpc.php"] [unique_id "ajNhVBmk3Hp6WdVYl_66mgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-06-18 02:22:56
(5 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-18 01:05:35
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 21:05:31.522010 2026] [security2:error] [pid 12322:tid 12322] [client 112.205.46.62:52877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|aifactoid.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aifactoid.com"] [uri "/xmlrpc.php"] [unique_id "ajNEWwGhw6vhzQ_UpX2nUQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 03:53:42
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 23:53:36.931227 2026] [security2:error] [pid 23768:tid 23768] [client 112.205.46.62:58419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|amywoodruff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "ajIaQK8yOT-ebI6j1AR_kAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-17 02:15:20
(6 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 22:42:36
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 112.205.46.62 (112.205.46.62.pldt.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 18:42:29.372739 2026] [security2:error] [pid 6425:tid 6425] [client 112.205.46.62:61627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 112.205.46.62 (+1 hits since last alert)|rotentendales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rotentendales.com"] [uri "/xmlrpc.php"] [unique_id "ajHRVToAA4I8E8MLx_eIgwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 09:02:44
(1 week ago)
Attac
Brute-Force