🇺🇸
TPI-Abuse
2026-08-25 08:18:22
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 119.13.56.11 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 119.13.56.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 04:18:14.762596 2026] [security2:error] [pid 31352:tid 31365] [client 119.13.56.11:27720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 119.13.56.11 (+1 hits since last alert)|fastesttrademark.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fastesttrademark.com"] [uri "/xmlrpc.php"] [unique_id "ao1Pxma5Y12GxqpKTSQXVgAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-25 04:43:51
(1 day ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇦🇺
screwlooseit.com.au
2026-08-22 03:42:56
(4 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
AU/Australia/-
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 04:27:37
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 119.13.56.11 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 119.13.56.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 00:27:33.551732 2026] [security2:error] [pid 28619:tid 28619] [client 119.13.56.11:32493] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 119.13.56.11 (+1 hits since last alert)|oakglenhouse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "oakglenhouse.com"] [uri "/xmlrpc.php"] [unique_id "aofTteCtLeE2RUv0UVvp2AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-07-27 01:13:09
(1 month ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap despite it clearly being a burning bag of dog poop.
119.13.56.11 443 - [27/Jul/2026:01:13:09 +0000] "GET [redacted] HTTP/1.1" 503 6148 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇺🇸
kosada.com
2026-07-25 05:58:24
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
Vegascosmetics
2026-07-08 03:40:34
(1 month ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
kosada.com
2026-07-07 11:19:53
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-05-07 06:33:51
(3 months ago)
Fail2ban filtered
...
Web App Attack
🇮🇹
VHosting
2026-04-30 07:12:41
(3 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇳🇱
EGP Abuse Dept
2026-04-08 01:40:15
(4 months ago)
Unsolicited connection to port 445
Port Scan
Hacking
2024-09-14 23:06:48
(1 year ago)
119.13.56.11 - - [15/Sep/2024:01:06:38 +0200] "GET /wp-login.php HTTP/1.1" 404 69790 "-" "Mozilla/5. ...
show more
119.13.56.11 - - [15/Sep/2024:01:06:38 +0200] "GET /wp-login.php HTTP/1.1" 404 69790 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:39 +0200] "GET /xmlrpc.php HTTP/1.1" 404 62361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:40 +0200] "GET /wp-login.php HTTP/1.1" 404 62363 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:41 +0200] "GET /xmlrpc.php HTTP/1.1" 404 62361 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:45 +0200] "GET /wp-login.php HTTP/1.1" 404 66532 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:46 +0200] "GET /xmlrpc.php HTTP/1.1" 404 59104 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
119.13.56.11 - - [15/Sep/2024:01:06:47 +
...
show less
Brute-Force
🇺🇸
withfallback.com
2023-11-11 04:00:33
(2 years ago)
Attempted SMB login
Brute-Force