🇺🇸
TPI-Abuse
2026-07-03 18:02:14
(6 hours ago)
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:02:08.653761 2026] [security2:error] [pid 3282:tid 3282] [client 5.31.40.136:57231] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 5.31.40.136 (+1 hits since last alert)|ruthbalser.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ruthbalser.org"] [uri "/xmlrpc.php"] [unique_id "akf5IBlr9o5H3v6oQMwOowAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Lunix
2026-07-02 16:35:34
(1 day ago)
Brute-Force
Web App Attack
2026-07-02 15:35:52
(1 day ago)
(wordpress) Failed wordpress login from 5.31.40.136 (AE/United Arab Emirates/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-02 14:55:47
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 10:55:42.376909 2026] [security2:error] [pid 6020:tid 6020] [client 5.31.40.136:55811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 5.31.40.136 (+1 hits since last alert)|desdier.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "desdier.com"] [uri "/xmlrpc.php"] [unique_id "akZ77mWg9wmgnCiqggNfnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-07-02 14:10:23
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 15:49:05
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 11:48:58.905227 2026] [security2:error] [pid 28904:tid 28904] [client 5.31.40.136:64984] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 5.31.40.136 (+1 hits since last alert)|comicpreservation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "comicpreservation.com"] [uri "/xmlrpc.php"] [unique_id "akU26pUZUjSR6xkUKqXzXwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
SweetHoneyPress
2026-07-01 14:16:43
(2 days ago)
WordPress honeypot: POST to /xmlrpc.php | event_id=974849 | UA: Jetpack by WordPress.com (Jetpack 12 ...
show more
WordPress honeypot: POST to /xmlrpc.php | event_id=974849 | UA: Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)
show less
Web App Attack
Brute-Force
🇪🇸
SweetHoneyPress
2026-07-01 14:01:33
(2 days ago)
WordPress honeypot: POST to /xmlrpc.php | event_id=974650 | UA: Jetpack by WordPress.com
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-07-01 13:02:10
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 5.31.40.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:02:06.325166 2026] [security2:error] [pid 709:tid 709] [client 5.31.40.136:58534] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 5.31.40.136 (+1 hits since last alert)|dokuzadabirdeniz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dokuzadabirdeniz.com"] [uri "/xmlrpc.php"] [unique_id "akUPztftcoQ0wNCbCN3V9AAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
applemooz
2026-06-30 20:48:17
(3 days ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack