🇦🇺
screwlooseit.com.au
2026-06-26 05:51:22
(20 seconds ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
HK/Hong Kong/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 13:23:00
(16 hours ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:22:52.332517 2026] [security2:error] [pid 22505:tid 22505] [client 156.230.182.39:44419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|drwolberg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drwolberg.com"] [uri "/xmlrpc.php"] [unique_id "aj0rrJfZdW6O8LaZB_T7AwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 10:20:29
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 06:20:23.777073 2026] [security2:error] [pid 20058:tid 20127] [client 156.230.182.39:37571] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|rockabyecotons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rockabyecotons.com"] [uri "/xmlrpc.php"] [unique_id "aj0A5w1LWi7QiUKz7mmpowAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 08:33:16
(21 hours ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 04:33:09.490530 2026] [security2:error] [pid 10244:tid 10244] [client 156.230.182.39:38966] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|midwayisland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midwayisland.com"] [uri "/xmlrpc.php"] [unique_id "ajznxU0xTADEmD9dQ-E9BAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 07:58:56
(21 hours ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:58:50.880862 2026] [security2:error] [pid 23253:tid 23253] [client 156.230.182.39:27387] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|starvationacres.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "starvationacres.us"] [uri "/xmlrpc.php"] [unique_id "ajzfuiJm0zmbcfIYDWyzwQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 02:34:54
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 22:34:50.182107 2026] [security2:error] [pid 7569:tid 7569] [client 156.230.182.39:17550] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|bonegym.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bonegym.com"] [uri "/xmlrpc.php"] [unique_id "ajyTynrQw_wTujYQRzTUIwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-06-20 13:10:18
(5 days ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇩🇪
check-the-sum.fr
2026-06-03 00:01:27
(3 weeks ago)
Port Scanning
Port Scan
🇺🇸
TPI-Abuse
2026-05-30 08:08:02
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 04:07:55.429035 2026] [security2:error] [pid 24110:tid 24110] [client 156.230.182.39:59722] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|97films.media|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "97films.media"] [uri "/xmlrpc.php"] [unique_id "ahqa221uRmd55Aw0JUT8rAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-05-30 04:49:20
(3 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇷
dynamix
2026-05-30 01:27:11
(3 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-05-29 07:40:11
(3 weeks ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-05-29 07:10:22
(3 weeks ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 06:42:30
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 02:42:24.494794 2026] [security2:error] [pid 25576:tid 25576] [client 156.230.182.39:52029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|nordicbuilders.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nordicbuilders.net"] [uri "/xmlrpc.php"] [unique_id "ahk1UEjjzYtZVx3XKoQNFwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 05:11:04
(4 weeks ago)
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 156.230.182.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 01:11:00.289781 2026] [security2:error] [pid 3818:tid 3887] [client 156.230.182.39:48553] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 156.230.182.39 (+1 hits since last alert)|artmarialeon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "artmarialeon.com"] [uri "/xmlrpc.php"] [unique_id "ahkf5EYuVBhxpkMMhPu5OAAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack