2026-06-11 07:30:49
(5 days ago)
Fail2ban filtered
...
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 05:56:02
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:55:58.492613 2026] [security2:error] [pid 11891:tid 11919] [client 202.47.55.76:16408] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|managementlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "managementlaw.com"] [uri "/xmlrpc.php"] [unique_id "ah_B7ozZD7QPWvFjDvh44wAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 04:42:13
(1 week ago)
Attac
Brute-Force
2026-06-01 07:20:26
(2 weeks ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-01 06:49:13
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 02:49:07.448011 2026] [security2:error] [pid 16362:tid 16460] [client 202.47.55.76:16633] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|whatismetamodern.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whatismetamodern.com"] [uri "/xmlrpc.php"] [unique_id "ah0rY2IXDeupDESNY_zNEwAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 05:50:15
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 01:50:10.195239 2026] [security2:error] [pid 9029:tid 9029] [client 202.47.55.76:17175] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|superzilla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superzilla.com"] [uri "/xmlrpc.php"] [unique_id "ah0dkgW0_Do9tRJcjtBA2wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 04:47:24
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 00:47:19.200475 2026] [security2:error] [pid 23159:tid 23163] [client 202.47.55.76:17425] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|michaelrandon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michaelrandon.com"] [uri "/xmlrpc.php"] [unique_id "ah0O193ljyvZjBKvf3YEnAAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-25 06:40:03
(3 weeks ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇳🇱
Site.eu
2026-05-23 16:54:21
(3 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-23 03:39:29
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 23:39:25.683939 2026] [security2:error] [pid 13837:tid 13837] [client 202.47.55.76:16532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mkdesignndetailing.com"] [uri "/xmlrpc.php"] [unique_id "ahEhbYO3rfX8NmvxPQ52RAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-05-22 04:19:35
(3 weeks ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 06:25:19
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 02:25:13.807221 2026] [security2:error] [pid 25749:tid 25749] [client 202.47.55.76:17249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|bigislandhawaiirealty.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bigislandhawaiirealty.com"] [uri "/xmlrpc.php"] [unique_id "ag6lSV_eSt_p1m4TFOCTIwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-20 06:56:22
(3 weeks ago)
Attac
Brute-Force
🇳🇱
Site.eu
2026-05-20 06:29:48
(3 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-20 06:05:25
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 202.47.55.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 02:05:21.108115 2026] [security2:error] [pid 6916:tid 6916] [client 202.47.55.76:17716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.47.55.76 (+1 hits since last alert)|emsystemsltd.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "emsystemsltd.com"] [uri "/xmlrpc.php"] [unique_id "ag1PIWYTlwteRJKLiwe_dwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack