🇺🇸
TPI-Abuse
2026-08-22 03:29:23
(19 minutes ago)
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:29:17.470186 2026] [security2:error] [pid 21160:tid 21229] [client 37.61.116.116:1323] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.61.116.116 (+1 hits since last alert)|plumeraproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "plumeraproductions.com"] [uri "/xmlrpc.php"] [unique_id "aokXjQjJqY2hdUEeR2v8awAAAlA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2026-08-21 22:01:19
(5 hours ago)
POST /xmlrpc.php [21/Aug/2026:12:31:16
Web App Attack
Brute-Force
🇺🇸
nationaleventpros.com
2026-08-21 20:24:51
(7 hours ago)
WordPress login attempt
Brute-Force
🇫🇮
YF
2026-08-21 19:00:43
(8 hours ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇩🇪
Teufel100
2026-08-21 18:49:27
(8 hours ago)
Brutforceangriff auf /xmlrpc.php
Brute-Force
Hacking
Web App Attack
🇧🇪
cmbplf
2026-08-21 18:40:13
(9 hours ago)
640 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-21 18:13:59
(9 hours ago)
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 14:13:53.918278 2026] [security2:error] [pid 25369:tid 25369] [client 37.61.116.116:11059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.61.116.116 (+1 hits since last alert)|amywoodruff.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "amywoodruff.com"] [uri "/xmlrpc.php"] [unique_id "aoiVYZDm3Jk8S_gv1lTl5QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 15:10:09
(12 hours ago)
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 11:10:02.116166 2026] [security2:error] [pid 21729:tid 21729] [client 37.61.116.116:4451] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.61.116.116 (+1 hits since last alert)|darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkalleyproductions.com"] [uri "/xmlrpc.php"] [unique_id "aohqSm670n2WD0s_uWZpbgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 14:40:18
(13 hours ago)
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 37.61.116.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 10:40:12.171346 2026] [security2:error] [pid 12548:tid 12548] [client 37.61.116.116:12254] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 37.61.116.116 (+1 hits since last alert)|automatebi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "automatebi.com"] [uri "/xmlrpc.php"] [unique_id "aohjTAPRfNk-RPhMDQYNbQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-08-21 13:36:17
(14 hours ago)
(wordpress) Failed wordpress login from 37.61.116.116 (AZ/Azerbaijan/-): (CF_ENABLE)
Brute-Force
🇫🇷
dynamix
2026-08-21 11:02:18
(16 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇹🇷
Domainhizmetleri.com
2026-07-30 16:48:45
(3 weeks ago)
[honeypot] - MS-SQL-PROBE
Port Scan
Hacking
🇩🇪
Vegascosmetics
2026-06-26 19:56:10
(1 month ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
MPL
2026-05-17 17:03:46
(3 months ago)
tcp/23 (4 or more attempts)
Port Scan
2026-02-21 01:00:22
(6 months ago)
DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ...
show more
DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443.
show less
DDoS Attack
Bad Web Bot
Web App Attack