🇫🇷
tecnicorioja
2026-07-09 22:02:20
(1 day ago)
POST /xmlrpc.php [09/Jul/2026:17:25:06
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-07-09 21:26:33
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 17:26:26.776299 2026] [security2:error] [pid 29491:tid 29491] [client 62.4.32.194:48676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|doreenkimura.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "doreenkimura.com"] [uri "/xmlrpc.php"] [unique_id "alASAmGiJGDA-_d6B0usGgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-09 20:56:16
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 16:30:15
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 12:30:11.495690 2026] [security2:error] [pid 24775:tid 24775] [client 62.4.32.194:49094] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|webersource.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webersource.com"] [uri "/xmlrpc.php"] [unique_id "ak_Mk9PAaj0lSe3Tz64t-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 15:29:32
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 11:29:26.116927 2026] [security2:error] [pid 1543:tid 1543] [client 62.4.32.194:57993] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|cienmalos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cienmalos.com"] [uri "/xmlrpc.php"] [unique_id "ak--VtB9yVmFZRRueVZdlAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-07-07 22:01:28
(3 days ago)
(wordpress) Failed wordpress login from 62.4.32.194 (ME/Montenegro/cable-cgn.32.194.mtel.me): (CF_E ...
show more
(wordpress) Failed wordpress login from 62.4.32.194 (ME/Montenegro/cable-cgn.32.194.mtel.me): (CF_ENABLE)
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-07 16:05:16
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 12:05:11.448292 2026] [security2:error] [pid 13017:tid 13017] [client 62.4.32.194:33921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|naominixon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "naominixon.com"] [uri "/xmlrpc.php"] [unique_id "ak0jtzidVDuGnVDHtxvpMwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 21:24:22
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:24:18.786816 2026] [security2:error] [pid 12957:tid 12957] [client 62.4.32.194:40964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hvacmechanalysis.com"] [uri "/xmlrpc.php"] [unique_id "akwdAnvyx5_2eY_BjYGd7gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-07-06 19:53:41
(4 days ago)
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: ["/xmlrpc.php"] | UA: ["Jetpack by WordPr ...
show more
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: ["/xmlrpc.php"] | UA: ["Jetpack by WordPress.com","Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)","Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)","Jetpack
show less
Brute-Force
Web App Attack
🇩🇪
Teufel100
2026-07-06 19:25:42
(4 days ago)
Brutforceangriff auf /xmlrpc.php
Brute-Force
Hacking
Web App Attack
🇩🇪
akasolutions.de
2026-07-06 18:02:20
(4 days ago)
(wordpress) Failed wordpress login from 62.4.32.194 (ME/Montenegro/cable-cgn.32.194.mtel.me)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-05 16:17:34
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 12:17:29.510501 2026] [security2:error] [pid 16771:tid 16771] [client 62.4.32.194:50133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|mchen-arch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mchen-arch.com"] [uri "/xmlrpc.php"] [unique_id "akqDmRTJo6BcFWlqt01OdwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-05 15:15:09
(5 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
integrantservices.com
2026-07-05 15:13:03
(5 days ago)
(wordpress) Failed wordpress login from 62.4.32.194 (ME/Montenegro/cable-cgn.32.194.mtel.me)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-03 21:49:19
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in th ...
show more
(mod_security) mod_security (id:240335) triggered by 62.4.32.194 (cable-cgn.32.194.mtel.me): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:49:11.448065 2026] [security2:error] [pid 18502:tid 18502] [client 62.4.32.194:43662] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 62.4.32.194 (+1 hits since last alert)|intelerium.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "intelerium.com"] [uri "/xmlrpc.php"] [unique_id "akguV1fLnKGDYRnnDW9KFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack