🇫🇷
masterguru
2026-06-08 11:36:20
(6 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
2026-06-07 16:37:13
(1 week ago)
Attac
Brute-Force
2026-06-07 14:12:57
(1 week ago)
(wordpress) Failed wordpress login from 37.40.227.83 (OM/Oman/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-07 09:18:00
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 05:17:56.679692 2026] [security2:error] [pid 4899:tid 4899] [client 37.40.227.83:29851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.40.227.83 (+1 hits since last alert)|slattery-law.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "slattery-law.com"] [uri "/xmlrpc.php"] [unique_id "aiU3RHtygSrxgenHfB8SzAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-06 19:00:12
(1 week ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-06-06 14:14:14
(1 week ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-06 13:21:27
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 09:21:23.706221 2026] [security2:error] [pid 3350:tid 3350] [client 37.40.227.83:29546] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.40.227.83 (+1 hits since last alert)|kerrywood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kerrywood.com"] [uri "/xmlrpc.php"] [unique_id "aiQe0xhBEAJNxYPCCHlb0gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 12:51:39
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 08:51:34.807180 2026] [security2:error] [pid 14968:tid 14968] [client 37.40.227.83:29668] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.40.227.83 (+1 hits since last alert)|axiomemail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "axiomemail.net"] [uri "/xmlrpc.php"] [unique_id "aiQX1tLvupYpe9Or-5KbFwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 12:18:12
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 08:18:07.485107 2026] [security2:error] [pid 16625:tid 16625] [client 37.40.227.83:29975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.40.227.83 (+1 hits since last alert)|designingdestinynow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "designingdestinynow.com"] [uri "/xmlrpc.php"] [unique_id "aiQP_3oUvaxcFXhXpQ62JwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-05 16:02:35
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 12:26:34
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.40.227.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 08:26:29.002453 2026] [security2:error] [pid 30864:tid 30864] [client 37.40.227.83:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.40.227.83 (+1 hits since last alert)|local639.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "local639.com"] [uri "/xmlrpc.php"] [unique_id "aiLAdDLArC5i9MENwGXbtgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-03 17:44:40
(1 week ago)
Attac
Brute-Force
2026-03-10 21:22:44
(3 months ago)
(mod_security) mod_security triggered on hostname [redacted] 37.40.227.83 (OM/Oman/-)
SQL Injection
🇺🇸
gui-ying233
2026-01-11 19:08:58
(5 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/ ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Brave Chrome/80.0.3987.116 Safari/537.36
show less
Bad Web Bot
🇩🇰
TransAdvice-Abuse
2025-12-26 10:47:55
(5 months ago)
IRC SPAM/Flood
DDoS Attack