🇺🇸
TPI-Abuse
2026-07-14 14:23:00
(10 hours ago)
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 10:22:54.050740 2026] [security2:error] [pid 30697:tid 30697] [client 187.109.88.52:53302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 187.109.88.52 (+1 hits since last alert)|huntingforebears.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "huntingforebears.com"] [uri "/xmlrpc.php"] [unique_id "alZGPmcfxuwko55GZvI8RAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 13:47:22
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 09:47:17.855877 2026] [security2:error] [pid 26837:tid 26837] [client 187.109.88.52:52879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 187.109.88.52 (+1 hits since last alert)|kbalan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kbalan.com"] [uri "/xmlrpc.php"] [unique_id "alY95cB_ru7vH7cBOBzrzgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-14 13:06:54
(12 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
konseptit
2026-07-13 17:32:51
(1 day ago)
(wordpress) Failed wordpress login from 187.109.88.52 (BR/Brazil/187-109-88-52.rdfnet.com.br)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-13 17:06:12
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:06:06.313168 2026] [security2:error] [pid 32640:tid 32640] [client 187.109.88.52:53185] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 187.109.88.52 (+1 hits since last alert)|braintechsoftwaresolutions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "braintechsoftwaresolutions.com"] [uri "/xmlrpc.php"] [unique_id "alUa_lBjfjI-qq9AVqZxFwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-07-13 16:31:22
(1 day ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 01:04:18
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 187.109.88.52 (187-109-88-52.rdfnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 21:04:13.329093 2026] [security2:error] [pid 16957:tid 16957] [client 187.109.88.52:51467] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 187.109.88.52 (+1 hits since last alert)|usaenquirer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "usaenquirer.com"] [uri "/xmlrpc.php"] [unique_id "alBFDa_0z_lBFQxvHWSfLAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-02 12:43:55
(8 months ago)
botnet
DDoS Attack
🇨🇭
ALPHANET
2025-10-07 13:00:42
(9 months ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇳🇱
exxos
2025-08-22 05:03:01
(10 months ago)
Attacks with Bad user agents
Hacking