🇺🇸
TPI-Abuse
2026-06-11 05:30:20
(7 hours ago)
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 01:30:12.503403 2026] [security2:error] [pid 11118:tid 11118] [client 61.5.147.142:18637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 61.5.147.142 (+1 hits since last alert)|premierveterinarysurgery.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "premierveterinarysurgery.com"] [uri "/xmlrpc.php"] [unique_id "aipH5KlsmXsmjxFKp-EuGAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 10:20:46
(1 day ago)
Attac
Brute-Force
🇩🇪
Tha_14
2026-06-03 18:04:07
(1 week ago)
Limit on login attempts is reached
Brute-Force
🇫🇮
KnightIndustries
2026-06-02 12:00:50
(1 week ago)
2026-06-02T14:00:25.784078+02:00 milkyway wordpress(oldscarborough.com)[2198572]: XML-RPC authentica ...
show more
2026-06-02T14:00:25.784078+02:00 milkyway wordpress(oldscarborough.com)[2198572]: XML-RPC authentication failure for joshua from 61.5.147.142
2026-06-02T14:00:38.025494+02:00 milkyway wordpress(oldscarborough.com)[2189309]: XML-RPC authentication failure for joshua from 61.5.147.142
2026-06-02T14:00:49.938423+02:00 milkyway wordpress(oldscarborough.com)[2189293]: XML-RPC authentication failure for joshua from 61.5.147.142
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 09:46:08
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 05:46:01.179578 2026] [security2:error] [pid 620:tid 620] [client 61.5.147.142:19847] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 61.5.147.142 (+1 hits since last alert)|medusakenya.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "ahwDWbKomAX4a8PIWUwOTAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-30 15:18:44
(1 week ago)
Attac
Brute-Force
2026-05-27 03:24:05
(2 weeks ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇫🇷
dynamix
2026-05-27 03:22:10
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2026-05-26 12:07:10
(2 weeks ago)
Attac
Brute-Force
2026-05-25 11:00:44
(2 weeks ago)
Attac
Brute-Force
🇩🇪
abdubhai
2026-05-17 09:48:38
(3 weeks ago)
61.5.147.142 - - [17/May/2026:14
...
Brute-Force
🇳🇱
e.fierstra
2026-05-17 09:25:02
(3 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 07:24:47
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:24:39.038917 2026] [security2:error] [pid 15176:tid 15176] [client 61.5.147.142:19918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 61.5.147.142 (+1 hits since last alert)|jesussotoca.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jesussotoca.com"] [uri "/xmlrpc.php"] [unique_id "af2Pt_qEq1E0wTTzNnjbpgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-04-27 09:01:46
(1 month ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-04-26 11:55:47
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 61.5.147.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 07:55:41.958058 2026] [security2:error] [pid 579:tid 579] [client 61.5.147.142:18463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 61.5.147.142 (+1 hits since last alert)|luxandunion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "luxandunion.com"] [uri "/xmlrpc.php"] [unique_id "ae39PRQAxnwYgBjTx5OrcQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack