🇫🇷
SpaceHost-Server
2026-05-17 22:41:11
(3 months ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-16 22:30:34
(3 months ago)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-05-16 13:29:31
(3 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
2026-05-16 13:00:40
(3 months ago)
Attac
Brute-Force
🇩🇪
Vasile
2026-05-15 16:07:56
(3 months ago)
Shield Guard: Blocklist: IP signalée (blocklist_de) | Chemin suspect: /xmlrpc.php | xmlrpc.php bloqu ...
show more
Shield Guard: Blocklist: IP signalée (blocklist_de) | Chemin suspect: /xmlrpc.php | xmlrpc.php bloqué
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-15 10:44:40
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 37.41.85.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.41.85.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:44:36.204821 2026] [security2:error] [pid 8706:tid 8706] [client 37.41.85.205:49979] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.41.85.205 (+1 hits since last alert)|drwolberg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "drwolberg.com"] [uri "/xmlrpc.php"] [unique_id "agb5FFYeZQkvkZ7HCFASIQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-15 08:05:41
(3 months ago)
37.41.85.205 - - [15/May/2026:10:05:23 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by Wo ...
show more
37.41.85.205 - - [15/May/2026:10:05:23 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
37.41.85.205 - - [15/May/2026:10:05:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
37.41.85.205 - - [15/May/2026:10:05:29 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack/12.1; WordPress/6.1; http://site50619336.com"
37.41.85.205 - - [15/May/2026:10:05:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.1; WordPress/6.1; http://site50619336.com"
37.41.85.205 - - [15/May/2026:10:05:40 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)"
...
show less
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-14 22:31:37
(3 months ago)
Brute-Force
Web App Attack
2026-05-14 20:50:09
(3 months ago)
Attac
Brute-Force
🇳🇱
Site.eu
2026-05-14 00:57:17
(3 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
2026-05-14 00:53:06
(3 months ago)
Fail2Ban triggered
Web App Attack
2026-05-13 23:13:04
(3 months ago)
[redacted] 37.41.85.205 - - [14/May/2026:01:12:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6727 "-" "J ...
show more
[redacted] 37.41.85.205 - - [14/May/2026:01:12:08 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6727 "-" "Jetpack/12.0; WordPress/6.3; http://site61477061.com"
[redacted] 37.41.85.205 - - [14/May/2026:01:12:30 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6727 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
[redacted] 37.41.85.205 - - [14/May/2026:01:12:41 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6727 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
[redacted] 37.41.85.205 - - [14/May/2026:01:12:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6686 "-" "WordPress.com; https://wordpress.com"
[redacted] 37.41.85.205 - - [14/May/2026:01:13:03 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6686 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 02:46:25
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 37.41.85.205 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 37.41.85.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 22:46:18.701559 2026] [security2:error] [pid 22118:tid 22118] [client 37.41.85.205:60040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.41.85.205 (+1 hits since last alert)|apexandroids.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "apexandroids.com"] [uri "/xmlrpc.php"] [unique_id "agPl-m5zo69gzsRw4nIvBAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2026-05-13 01:32:28
(3 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇨🇦
Paulo Henrique dos Santos Nichio
2026-05-12 20:40:00
(3 months ago)
(ls_brute) LiteSpeed Brute Force Attack 37.41.85.205 (OM/Oman/-): 3 in the last 600 secs; Ports: *; ...
show more
(ls_brute) LiteSpeed Brute Force Attack 37.41.85.205 (OM/Oman/-): 3 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-05-12 17:39:28.268825 [WARN] [2268609] [T0] [37.41.85.205:55542-6#APVH_www.marcocosta.eng.br:443] Brute force detected for IP [37.41.85.205], throttle.
2026-05-12 17:39:40.203160 [WARN] [2268609] [T0] [37.41.85.205:55542-7#APVH_www.marcocosta.eng.br:443] Brute force detected for IP [37.41.85.205], throttle.
2026-05-12 17:39:54.200908 [WARN] [2268609] [T0] [37.41.85.205:58600#APVH_www.marcocosta.eng.br:443] Brute force detected for IP [37.41.85.205], throttle.
show less
Port Scan