🇫🇷
dynamix
2026-06-16 20:12:41
(6 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-06-16 14:05:41
(12 hours ago)
(xmlrpc) Apache: Failed xmlrpc access from 41.46.58.73 (EG/Egypt/-): 10 in the last 3600 secs (0-201 ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 41.46.58.73 (EG/Egypt/-): 10 in the last 3600 secs (0-201)
show less
Hacking
🇫🇷
SpaceHost-Server
2026-06-16 11:36:21
(15 hours ago)
41.46.58.73 - - [16/Jun/2026:13:35:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by Wo ...
show more
41.46.58.73 - - [16/Jun/2026:13:35:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
41.46.58.73 - - [16/Jun/2026:13:36:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack/12.5; WordPress/6.1; http://site36918980.com"
41.46.58.73 - - [16/Jun/2026:13:36:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com"
show less
Hacking
Web App Attack
🇫🇷
SpaceHost-Server
2026-06-16 11:20:53
(15 hours ago)
41.46.58.73 - - [16/Jun/2026:13:20:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by Wo ...
show more
41.46.58.73 - - [16/Jun/2026:13:20:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
41.46.58.73 - - [16/Jun/2026:13:20:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com"
41.46.58.73 - - [16/Jun/2026:13:20:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6476 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 20:44:04
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 16:43:58.821799 2026] [security2:error] [pid 22523:tid 22523] [client 41.46.58.73:7989] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|alafiariverrendezvous.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "alafiariverrendezvous.org"] [uri "/xmlrpc.php"] [unique_id "ajBkDiAOzblVTN5h2j5ZUQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:41:54
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:41:45.726948 2026] [security2:error] [pid 16484:tid 16484] [client 41.46.58.73:8991] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|xcarsubscription.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xcarsubscription.com"] [uri "/xmlrpc.php"] [unique_id "ai_k-bR2wCp06KKQiDXMtQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:01:55
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:01:49.526327 2026] [security2:error] [pid 23307:tid 23400] [client 41.46.58.73:11243] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|darkestmoonart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkestmoonart.com"] [uri "/xmlrpc.php"] [unique_id "ai_bnZiYjAVNxpaCIQkCMQAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 10:24:31
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:24:25.791360 2026] [security2:error] [pid 23283:tid 23283] [client 41.46.58.73:16025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|ewingmissouri.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ewingmissouri.com"] [uri "/xmlrpc.php"] [unique_id "ai_S2RH-KiXH2qnvDUhc1AAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 08:36:28
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 19:57:27
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:57:19.097759 2026] [security2:error] [pid 27303:tid 27303] [client 41.46.58.73:6209] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|boaredraven.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "boaredraven.com"] [uri "/xmlrpc.php"] [unique_id "ai8Hn10yfIHOGb-jLIgV6QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 15:53:25
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 11:53:19.195240 2026] [security2:error] [pid 10804:tid 10804] [client 41.46.58.73:15630] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|shhcenter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "shhcenter.com"] [uri "/xmlrpc.php"] [unique_id "ai7Ob5GS6vgW_BspMfSrqAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 13:49:54
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 09:49:49.262755 2026] [security2:error] [pid 32285:tid 32285] [client 41.46.58.73:4737] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|market1st.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "market1st.com"] [uri "/xmlrpc.php"] [unique_id "ai6xfazrHkGzsgVlWLL6yAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-06-14 11:31:31
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 21:42:14
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 17:42:08.713259 2026] [security2:error] [pid 32266:tid 32266] [client 41.46.58.73:11280] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|fredlandia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fredlandia.com"] [uri "/xmlrpc.php"] [unique_id "ai3OsMz6YqqeThuZzaWXIgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 19:07:44
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 41.46.58.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 15:07:37.693087 2026] [security2:error] [pid 17849:tid 17849] [client 41.46.58.73:6287] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 41.46.58.73 (+1 hits since last alert)|vrevgaming.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vrevgaming.net"] [uri "/xmlrpc.php"] [unique_id "ai2qeZVfxIKyxuo-usBpjQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack