|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:26:18.133487 2026] [security2:error] [pid 15311:tid 15311] [client 39.36.212.231:64658] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.36.212.231 (+1 hits since last alert)|morninginc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "morninginc.com"] [uri "/xmlrpc.php"] [unique_id "alXWijpoh6Vy8QGeXvIlIAAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇪🇸
masterguru
|
|
(xmlrpc) Failed xmlrpc access from 39.36.212.231 (PK/Pakistan/-): 5 in the last 3600 secs (0-122)
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 18:43:06.640685 2026] [security2:error] [pid 14157:tid 14157] [client 39.36.212.231:60955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.36.212.231 (+1 hits since last alert)|jerielster.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jerielster.com"] [uri "/xmlrpc.php"] [unique_id "alVp-nHtN5NgF-aC4flhHgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
masterguru
|
|
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 17:41:28.938312 2026] [security2:error] [pid 15140:tid 15140] [client 39.36.212.231:52507] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.36.212.231 (+1 hits since last alert)|f40ph.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "f40ph.org"] [uri "/xmlrpc.php"] [unique_id "alVbiKUllCxvmtqy8JyLqAAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
Marc
|
|
39.36.212.231 - - [13/Jul/2026:23:38:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3549 "-" "WordPress.c ...
show more
39.36.212.231 - - [13/Jul/2026:23:38:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3549 "-" "WordPress.com; https://wordpress.com" 39.36.212.231 - - [13/Jul/2026:23:38:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3549 "-" "Jetpack by WordPress.com" 39.36.212.231 - - [13/Jul/2026:23:39:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3548 "-" "Jetpack/13.0; WordPress/6.1; http://site93959187.com"
show less
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 39.36.212.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 15:06:54.227234 2026] [security2:error] [pid 20547:tid 20551] [client 39.36.212.231:57740] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.36.212.231 (+1 hits since last alert)|abusaimeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abusaimeh.com"] [uri "/xmlrpc.php"] [unique_id "alU3Tnv7c7TtziUT09DCAQAAAIA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
dynamix
|
|
WordPress XMLRPC Brute Force Attack
|
Brute-Force
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803
|
Bad Web Bot
|
|