🇳🇱
Site.eu
2026-08-17 14:49:16
UTC ·
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
ghostwarriors
2026-08-17 09:50:44
UTC ·
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-08-17 09:27:12
UTC ·
(2 months ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 04:43:41
UTC ·
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:43:36.093290 2026] [security2:error] [pid 32398:tid 32398] [client 18 ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:43:36.093290 2026] [security2:error] [pid 32398:tid 32398] [client 183.83.235.206:28384] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|lysedzija.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lysedzija.com"] [uri "/xmlrpc.php"] [unique_id "aoKReALgPIUEHy7RhN9MnwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-08-17 04:25:47
UTC ·
(2 months ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-08-16 09:04:30
UTC ·
(2 months ago)
[redacted] 183.83.235.206 - - [16/Aug/2026:11:03:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 183.83.235.206 - - [16/Aug/2026:11:03:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13. ...
show more
[redacted] 183.83.235.206 - - [16/Aug/2026:11:03:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 183.83.235.206 - - [16/Aug/2026:11:03:57 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.1; http://site24394504.com"
[redacted] 183.83.235.206 - - [16/Aug/2026:11:04:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site76519714.com"
[redacted] 183.83.235.206 - - [16/Aug/2026:11:04:21 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site76199856.com"
[redacted] 183.83.235.206 - - [16/Aug/2026:11:04:29 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site33794586.com"
...
show less
Hacking
Web App Attack
🇺🇸
integrantservices.com
2026-08-16 06:03:33
UTC ·
(2 months ago)
(wordpress) Failed wordpress login from 183.83.235.206 (IN/India/broadband.actcorp.in)
Brute-Force
🇩🇪
rh24
2026-08-15 14:38:26
UTC ·
(3 months ago)
(xmlrpc_405) XMLRPC-Bot 405 183.83.235.206 (IN/India/broadband.actcorp.in)
Hacking
🇺🇸
TPI-Abuse
2026-08-15 10:53:14
UTC ·
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 06:53:07.261290 2026] [security2:error] [pid 14525:tid 14525] [client 18 ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 06:53:07.261290 2026] [security2:error] [pid 14525:tid 14525] [client 183.83.235.206:28679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|maeandtheguys.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "maeandtheguys.com"] [uri "/xmlrpc.php"] [unique_id "aoBFE0E_iZIIE1y7Fu3fiwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 06:24:22
UTC ·
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 02:24:16.096110 2026] [security2:error] [pid 7992:tid 7992] [client 183. ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 02:24:16.096110 2026] [security2:error] [pid 7992:tid 7992] [client 183.83.235.206:27466] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|crookedriverbicentennial.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crookedriverbicentennial.org"] [uri "/xmlrpc.php"] [unique_id "aoAGEL1bUwF4NgOxs4JpZQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-14 12:50:22
UTC ·
(3 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-08-14 12:21:59
UTC ·
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 08:21:54.898333 2026] [security2:error] [pid 14323:tid 14323] [client 18 ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 08:21:54.898333 2026] [security2:error] [pid 14323:tid 14323] [client 183.83.235.206:28342] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|495metro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "495metro.com"] [uri "/xmlrpc.php"] [unique_id "an8IYiabsQmx1ibuaMXVEgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
cwytech
2026-08-14 10:15:47
UTC ·
(3 months ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 10:01:16
UTC ·
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 06:01:10.016626 2026] [security2:error] [pid 16618:tid 16618] [client 18 ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 06:01:10.016626 2026] [security2:error] [pid 16618:tid 16618] [client 183.83.235.206:28763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|batesstrategygroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "batesstrategygroup.com"] [uri "/xmlrpc.php"] [unique_id "an7nZhLKC4mxxwt8lCrRigAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-14 09:37:41
UTC ·
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 05:37:36.062910 2026] [security2:error] [pid 1236339:tid 1236339] [clien ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.235.206 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 14 05:37:36.062910 2026] [security2:error] [pid 1236339:tid 1236339] [client 183.83.235.206:28819] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.235.206 (+1 hits since last alert)|baselinesc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "baselinesc.com"] [uri "/xmlrpc.php"] [unique_id "an7h4A6M-LBn4qWO7HGmngAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack