🇫🇷
SpaceHost-Server
2026-07-03 22:28:46
(1 day ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-02 22:28:37
(2 days ago)
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-07-02 13:25:40
(2 days ago)
(xmlrpc) Failed xmlrpc access from 182.180.52.99 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
abdubhai
2026-07-02 06:12:17
(2 days ago)
182.180.52.99 - - [02/Jul/2026:1
...
Brute-Force
🇺🇸
TPI-Abuse
2026-05-20 04:29:10
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:29:04.714117 2026] [security2:error] [pid 8403:tid 8410] [client 182.180.52.99:50751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|seriousgames-system.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seriousgames-system.info"] [uri "/xmlrpc.php"] [unique_id "ag04kLMDcVRUhG9L675XCQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 19:13:31
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 15:13:25.206505 2026] [security2:error] [pid 24548:tid 24548] [client 182.180.52.99:55625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|graciousholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "graciousholding.com"] [uri "/xmlrpc.php"] [unique_id "afEG1TpFxuwCMEq9uiARDwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2026-04-28 14:34:55
(2 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇬🇧
Apache
2026-04-28 09:11:33
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (PK/Pakistan/-): 5 in the last 30 ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (PK/Pakistan/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇺🇸
integrantservices.com
2026-04-27 19:03:58
(2 months ago)
(wordpress) Failed wordpress login from 182.180.52.99 (PK/Pakistan/-)
Brute-Force
2026-04-27 18:05:23
(2 months ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (150/60 min)'; Requests=150
Port Scan
🇺🇸
TPI-Abuse
2026-04-27 13:27:39
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 09:27:33.845196 2026] [security2:error] [pid 21253:tid 21253] [client 182.180.52.99:64894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|susanleeward.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "susanleeward.com"] [uri "/xmlrpc.php"] [unique_id "ae9kRRhJUrV8lnW26lwLqAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-27 10:27:40
(2 months ago)
[redacted] 182.180.52.99 - - [27/Apr/2026:12:26:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 182.180.52.99 - - [27/Apr/2026:12:26:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 182.180.52.99 - - [27/Apr/2026:12:27:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.2; http://site34881801.com"
[redacted] 182.180.52.99 - - [27/Apr/2026:12:27:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 182.180.52.99 - - [27/Apr/2026:12:27:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 182.180.52.99 - - [27/Apr/2026:12:27:39 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-27 09:37:55
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 05:37:50.985109 2026] [security2:error] [pid 10807:tid 10807] [client 182.180.52.99:64894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|sandpointidaho.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sandpointidaho.com"] [uri "/xmlrpc.php"] [unique_id "ae8ubqm63-QDj9T7iXRGvQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 07:58:56
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 03:58:52.625145 2026] [security2:error] [pid 4655:tid 4655] [client 182.180.52.99:50421] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|ssion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ssion.com"] [uri "/xmlrpc.php"] [unique_id "aesivMUEKoDuDtegR9zqQgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 16:47:39
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 182.180.52.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 12:47:32.307960 2026] [security2:error] [pid 4148018:tid 4148018] [client 182.180.52.99:59330] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 182.180.52.99 (+1 hits since last alert)|cypro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cypro.com"] [uri "/xmlrpc.php"] [unique_id "aepNJBDF__ZDn45u5ekgNAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack