🇺🇸
TPI-Abuse
2026-07-18 15:42:53
(46 minutes ago)
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:42:47.779088 2026] [security2:error] [pid 14324:tid 14324] [client 196.15.220.75:54040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.15.220.75 (+1 hits since last alert)|targetbinario.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "targetbinario.com"] [uri "/xmlrpc.php"] [unique_id "alue96ynzUyP57z9-CsYxAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-17 22:31:06
(17 hours ago)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-07-17 20:36:52
(19 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-16 22:28:35
(1 day ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 19:48:58
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:48:50.830559 2026] [security2:error] [pid 4576:tid 4583] [client 196.15.220.75:54416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.15.220.75 (+1 hits since last alert)|darrylrichards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darrylrichards.com"] [uri "/xmlrpc.php"] [unique_id "alk1okFS0Oyq08seN5xj5wAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 22:58:29
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 18:58:21.801409 2026] [security2:error] [pid 30948:tid 30980] [client 196.15.220.75:58587] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.15.220.75 (+1 hits since last alert)|tomithai.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tomithai.com"] [uri "/xmlrpc.php"] [unique_id "algQjTTqwp2nqLiYUD9r8QAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-05-20 16:06:39
(1 month ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
2026-05-20 07:20:47
(1 month ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-05-19 13:32:09
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.15.220.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 09:32:05.225566 2026] [security2:error] [pid 20596:tid 20596] [client 196.15.220.75:54053] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.15.220.75 (+1 hits since last alert)|zabyte.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "zabyte.net"] [uri "/xmlrpc.php"] [unique_id "agxmVY30oqRzFZufcHllxwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-19 07:06:11
(1 month ago)
Attac
Brute-Force
🇺🇸
matt
2026-03-03 23:13:35
(4 months ago)
DDOS attack with query parameters attempting to overload WordPress site.
DDoS Attack
🇨🇭
backslash
2025-11-05 07:30:32
(8 months ago)
block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09
Bad Web Bot
🇳🇱
exxos
2025-08-23 23:03:01
(10 months ago)
Attacks with Bad user agents
Hacking
🇳🇱
exxos
2025-07-27 22:35:18
(11 months ago)
Attacks with Bad user agents
Hacking
🇳🇱
exxos
2025-07-05 22:31:13
(1 year ago)
Attacks with Bad user agents
Hacking