๐บ๐ธ
TPI-Abuse
2026-07-28 05:39:08
(6 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:39:03.231021 2026] [security2:error] [pid 6370:tid 6403] [client 86.98.52.114:8427] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|vinylnotespodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vinylnotespodcast.com"] [uri "/xmlrpc.php"] [unique_id "amhAd6rPTQ_wfDi-4RyIjgAAAcE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 15:33:14
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:33:07.844318 2026] [security2:error] [pid 7711:tid 7711] [client 86.98.52.114:44407] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|wpcoc.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wpcoc.org"] [uri "/xmlrpc.php"] [unique_id "amd6M-h_CdXv5FpfVa99FAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 15:08:36
(20 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 11:08:31.951822 2026] [security2:error] [pid 22287:tid 22287] [client 86.98.52.114:17462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|newhopepetgrooming.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newhopepetgrooming.com"] [uri "/xmlrpc.php"] [unique_id "amd0b1HaXfOQOOGT77Jm_AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 14:12:43
(21 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:12:35.125462 2026] [security2:error] [pid 493399:tid 493399] [client 86.98.52.114:12588] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|glassclublake.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "glassclublake.com"] [uri "/xmlrpc.php"] [unique_id "amdnU2vheQfLdAcYWmCDsQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 12:04:24
(23 hours ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:04:17.433570 2026] [security2:error] [pid 3543686:tid 3543686] [client 86.98.52.114:22485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|gasoilliquidsdaily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gasoilliquidsdaily.com"] [uri "/xmlrpc.php"] [unique_id "amdJQQ_Z_r-SYeCT3dJmUwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
alferez
2026-07-24 12:41:22
(3 days ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-07-24 07:23:47
(4 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
AE/United Arab Emirates/bba-86-98-52-114.alshamil.net.ae
Web App Attack
๐ซ๐ฎ
YF
2026-07-23 11:00:43
(5 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐บ๐ธ
WeekendWeb
2026-07-23 08:40:47
(5 days ago)
Wordpress Vunerability attack
Web App Attack
๐ช๐ธ
alferez
2026-07-22 13:33:26
(5 days ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
๐ซ๐ท
dynamix
2026-07-20 14:30:09
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
Dolphi
2026-07-20 10:00:09
(1 week ago)
Excessive POST /xmlrpc.php requests
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-18 12:51:48
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 08:51:43.164174 2026] [security2:error] [pid 31410:tid 31418] [client 86.98.52.114:32721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|jofdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jofdt.com"] [uri "/xmlrpc.php"] [unique_id "alt237XB8uY9LaO-4jHYRwAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-18 11:45:12
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.98.52.114 (bba-86-98-52-114.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 07:45:05.333346 2026] [security2:error] [pid 1976998:tid 1976998] [client 86.98.52.114:29496] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.98.52.114 (+1 hits since last alert)|helloauto.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "helloauto.net"] [uri "/xmlrpc.php"] [unique_id "altnQckeGbo85XXSZ3H8DwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
bigwavedave
2026-07-18 09:09:25
(1 week ago)
Wordpress Attack
Web App Attack