🇫🇷
SpaceHost-Server
2026-06-10 22:26:59
(1 day ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 05:04:56
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.b ...
show more
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 01:04:52.800370 2026] [security2:error] [pid 28293:tid 28319] [client 152.241.68.77:64571] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 152.241.68.77 (+1 hits since last alert)|artmarialeon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artmarialeon.com"] [uri "/xmlrpc.php"] [unique_id "aijwdGCPUOialqSlHTDxZgAAAVc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 18:32:32
(2 days ago)
Fail2ban filtered
...
Web App Attack
2026-06-09 18:02:44
(2 days ago)
(wordpress) Failed wordpress login from 152.241.68.77 (BR/Brazil/152-241-68-77.user.vivozap.com.br)
Brute-Force
2026-06-09 09:06:06
(2 days ago)
Trying to access config files
Web App Attack
2026-06-09 06:03:13
(2 days ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-09 03:15:41
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.b ...
show more
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:15:36.031878 2026] [security2:error] [pid 7527:tid 7527] [client 152.241.68.77:51148] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 152.241.68.77 (+1 hits since last alert)|konahawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "konahawaiirealty.com"] [uri "/xmlrpc.php"] [unique_id "aieFWDPZ-rzhztBTiM_VVgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-06-09 02:23:22
(3 days ago)
Wordpress Vunerability attack
Web App Attack
2026-06-05 12:28:43
(6 days ago)
[server.tmg.gr] httpd-xmlrpc-post: sites=aegeanpvdforum.com; logs=/var/log/httpd/domains/aegeanpvdfo ...
show more
[server.tmg.gr] httpd-xmlrpc-post: sites=aegeanpvdforum.com; logs=/var/log/httpd/domains/aegeanpvdforum.com.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
2026-06-04 22:41:13
(1 week ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-04 20:03:50
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.b ...
show more
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:03:45.511449 2026] [security2:error] [pid 10875:tid 10875] [client 152.241.68.77:50077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 152.241.68.77 (+1 hits since last alert)|zerotaxlab.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zerotaxlab.com"] [uri "/xmlrpc.php"] [unique_id "aiHaIfhuLD1V2UYI1awYSQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 12:30:31
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.b ...
show more
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:30:27.447930 2026] [security2:error] [pid 2547:tid 2547] [client 152.241.68.77:56184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 152.241.68.77 (+1 hits since last alert)|magnoliahillproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "magnoliahillproductions.com"] [uri "/xmlrpc.php"] [unique_id "aiFv4wLa6LVFzkgDlY8TYAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-04 12:08:03
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 09:36:10
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.b ...
show more
(mod_security) mod_security (id:240335) triggered by 152.241.68.77 (152-241-68-77.user.vivozap.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:36:06.330422 2026] [security2:error] [pid 28418:tid 28418] [client 152.241.68.77:59717] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 152.241.68.77 (+1 hits since last alert)|3beeze.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "3beeze.com"] [uri "/xmlrpc.php"] [unique_id "aiFHBo-lXmwYjAWrxfnIpAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack