🇬🇧
noise.agency
2026-06-22 18:49:20
(16 hours ago)
(wordpress) Failed wordpress login from 23.108.36.40 (US/United States/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-22 13:00:08
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 09:00:01.161172 2026] [security2:error] [pid 11509:tid 11509] [client 23.108.36.40:48995] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.108.36.40 (+1 hits since last alert)|pleaseaddbacon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "pleaseaddbacon.com"] [uri "/xmlrpc.php"] [unique_id "ajkx0ZGIzsHxR1XMpmyBLAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
konseptit
2026-06-18 17:11:30
(4 days ago)
(wordpress) Failed wordpress login from 23.108.36.40 (US/United States/-)
Brute-Force
🇩🇪
yvoictra
2026-06-18 15:07:51
(4 days ago)
23.108.36.40 - - [18/Jun/2026:17:06:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com ...
show more
23.108.36.40 - - [18/Jun/2026:17:06:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com"
23.108.36.40 - - [18/Jun/2026:17:07:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
23.108.36.40 - - [18/Jun/2026:17:07:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com"
23.108.36.40 - - [18/Jun/2026:17:07:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com"
23.108.36.40 - - [18/Jun/2026:17:07:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com"
23.108.36.40 - - [18/Jun/2026:17:07:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)"
...
show less
Brute-Force
Web App Attack
2026-06-17 22:12:48
(5 days ago)
Fail2ban filtered
...
Web App Attack
2026-06-17 19:08:23
(5 days ago)
(wordpress) Failed wordpress login from 23.108.36.40 (US/United States/-)
Brute-Force
🇫🇷
Kenshin869
2026-06-17 17:03:57
(5 days ago)
Wordpress unauthorized access attempt
Brute-Force
🇩🇪
rh24
2026-06-16 21:00:32
(6 days ago)
(wordpress) Failed wordpress login from 23.108.36.40 (US/United States/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-16 18:28:31
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 14:28:22.676945 2026] [security2:error] [pid 4078:tid 4078] [client 23.108.36.40:32714] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.108.36.40 (+1 hits since last alert)|assembliesofgodinsamoa.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "assembliesofgodinsamoa.org"] [uri "/xmlrpc.php"] [unique_id "ajGVxlwPU0z8pusRJ9cZDgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-06-15 21:36:03
(1 week ago)
Wordfence waf block on lostswordfish
Web App Attack
2026-06-15 17:35:26
(1 week ago)
2026-06-15T19:35:24.977156+02:00 aion wordpress[503562]: Blocked authentication attempt for admin fr ...
show more
2026-06-15T19:35:24.977156+02:00 aion wordpress[503562]: Blocked authentication attempt for admin from 23.108.36.40
...
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 16:05:18
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 12:05:13.959299 2026] [security2:error] [pid 23713:tid 23713] [client 23.108.36.40:48216] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.108.36.40 (+1 hits since last alert)|mavikalem.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mavikalem.org"] [uri "/xmlrpc.php"] [unique_id "aiwuOXWuRFtLgJbXXMGf3AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 16:41:31
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 23.108.36.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 12:41:23.300212 2026] [security2:error] [pid 5160:tid 5160] [client 23.108.36.40:7688] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 23.108.36.40 (+1 hits since last alert)|grasslakepizzatime.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "grasslakepizzatime.com"] [uri "/xmlrpc.php"] [unique_id "aiL8M0hqfaoGLRXWH8RTuAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-05 13:40:02
(2 weeks ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇩🇪
konseptit
2026-06-04 17:50:34
(2 weeks ago)
(wordpress) Failed wordpress login from 23.108.36.40 (US/United States/-)
Brute-Force