🇫🇷
dynamix
2026-06-11 16:22:20
(16 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:57:45
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:57:40.342020 2026] [security2:error] [pid 4305:tid 4305] [client 154.67.36.60:18093] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|desarrollosdecolima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "desarrollosdecolima.com"] [uri "/xmlrpc.php"] [unique_id "aira9H-jQgcSr5YVWfaTvwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:30:51
(17 hours ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:30:44.234232 2026] [security2:error] [pid 11371:tid 11371] [client 154.67.36.60:17956] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|stinsonbeachsurfandkayak.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/xmlrpc.php"] [unique_id "airUpA3pMXuLxbr_9qPW8AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-11 13:31:01
(19 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-06-11 12:22:26
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:22:23.044172 2026] [security2:error] [pid 1518:tid 1518] [client 154.67.36.60:17587] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|takemehomedogrescue.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "takemehomedogrescue.org"] [uri "/xmlrpc.php"] [unique_id "aiqof5AUd08DR8WLtZ1Y3QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 08:14:32
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:14:26.452214 2026] [security2:error] [pid 23815:tid 23815] [client 154.67.36.60:17480] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|karenbernsteinlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "karenbernsteinlaw.com"] [uri "/xmlrpc.php"] [unique_id "aipuYhUPV3-wK3DIzD4eigAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 20:46:10
(1 day ago)
Attac
Brute-Force
🇺🇸
n2nguyenn2nguyen
2026-06-10 20:44:43
(1 day ago)
Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 19:17:19
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:17:15.344531 2026] [security2:error] [pid 23886:tid 23886] [client 154.67.36.60:17603] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|yanlidesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yanlidesign.com"] [uri "/xmlrpc.php"] [unique_id "aim4O_3AJ3LLsHIgjIvwngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-10 18:31:36
(1 day ago)
(wordpress) Failed wordpress login from 154.67.36.60 (RE/Réunion/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 12:59:23
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:59:17.457162 2026] [security2:error] [pid 4347:tid 4347] [client 154.67.36.60:17671] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|opticasprisma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "opticasprisma.com"] [uri "/xmlrpc.php"] [unique_id "ailfpWwoeK2PvKPxBcwTYQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2026-06-10 12:11:31
(1 day ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇦🇺
QT
2026-06-09 20:29:49
(2 days ago)
Unauthorised WordPress admin login attempted at 2026-06-10 06:29:48 +1000
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:05:06
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:04:57.369435 2026] [security2:error] [pid 24414:tid 24414] [client 154.67.36.60:17732] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|roguetechhub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechhub.com"] [uri "/xmlrpc.php"] [unique_id "aihx6cL33KSPNXZ6Hd_y1QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 17:59:59
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 154.67.36.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:59:54.137899 2026] [security2:error] [pid 26682:tid 26682] [client 154.67.36.60:18129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 154.67.36.60 (+1 hits since last alert)|eileensharaga.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "aihUmj2okBuaRR6ZXcTW3wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack