🇺🇸
TPI-Abuse
2026-06-12 02:20:55
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:20:43.059351 2026] [security2:error] [pid 17698:tid 17698] [client 180.72.197.153:64296] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|pattenden.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pattenden.com"] [uri "/xmlrpc.php"] [unique_id "aits-wij7TtX-24THl-IWQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 01:45:36
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 21:45:26.647681 2026] [security2:error] [pid 3224:tid 3224] [client 180.72.197.153:57617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|superzilla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superzilla.com"] [uri "/xmlrpc.php"] [unique_id "aitktuKVRfC50xfNnWevHgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-11 22:33:45
(8 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
MY/Malaysia/-
Web App Attack
🇫🇷
dynamix
2026-06-11 22:33:24
(8 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇬🇧
cg-design.co.uk
2026-06-11 17:47:38
(13 hours ago)
(wordpress) Failed wordpress login from 180.72.197.153 (MY/Malaysia/-)
Brute-Force
🇺🇸
integrantservices.com
2026-06-11 14:42:58
(16 hours ago)
(wordpress) Failed wordpress login from 180.72.197.153 (MY/Malaysia/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-11 10:29:32
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:29:20.625549 2026] [security2:error] [pid 29920:tid 29920] [client 180.72.197.153:62778] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|difusionens.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "difusionens.org"] [uri "/xmlrpc.php"] [unique_id "aiqOAIZaeKuEUK1dhW7R6AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-06-11 09:55:08
(21 hours ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:25:44
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:25:34.462857 2026] [security2:error] [pid 10894:tid 10894] [client 180.72.197.153:57604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|geckoturner.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geckoturner.com"] [uri "/xmlrpc.php"] [unique_id "aipU3vbYyQHT2yJNB7egDAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 20:49:25
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 16:49:11.931545 2026] [security2:error] [pid 24475:tid 24483] [client 180.72.197.153:58702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|sparkhypnotherapy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sparkhypnotherapy.com"] [uri "/xmlrpc.php"] [unique_id "ainNx961adZzAvn88UqiDAAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 17:33:33
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 180.72.197.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 13:33:19.978159 2026] [security2:error] [pid 2032:tid 2032] [client 180.72.197.153:51548] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 180.72.197.153 (+1 hits since last alert)|azcrittergetter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "azcrittergetter.com"] [uri "/xmlrpc.php"] [unique_id "aimf31-3Glve46jd76F6jAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 16:10:56
(1 day ago)
Web App Attack, Hacking
Hacking
Web App Attack