๐ท๐ด
SpamStopper
2026-06-17 12:20:21
(4 days ago)
Fail2Ban - WordPress Bruteforce WordPress logins and Looking for CMS/PHP/SQL vulnerabilities
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-17 01:19:53
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 21:19:49.693633 2026] [security2:error] [pid 15341:tid 15341] [client 86.99.36.214:62336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.99.36.214 (+1 hits since last alert)|hendersonhomes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hendersonhomes.com"] [uri "/xmlrpc.php"] [unique_id "ajH2NSq5dWua3-LFuvlV4AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-06-17 00:38:03
(4 days ago)
trying wp-login.php/xmlrpc.php 34 times in 1 minutes
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-17 00:19:24
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 20:19:19.361323 2026] [security2:error] [pid 20120:tid 20120] [client 86.99.36.214:56589] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.99.36.214 (+1 hits since last alert)|techsunlimited.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techsunlimited.net"] [uri "/xmlrpc.php"] [unique_id "ajHoB85JunEUWqvU3ItnpgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-16 22:05:25
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae) ...
show more
(mod_security) mod_security (id:240335) triggered by 86.99.36.214 (bba-86-99-36-214.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 18:05:21.204797 2026] [security2:error] [pid 3721:tid 3721] [client 86.99.36.214:62169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 86.99.36.214 (+1 hits since last alert)|kavahawaii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kavahawaii.com"] [uri "/xmlrpc.php"] [unique_id "ajHIoR_TZiuPyBPMwOmiYQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-16 22:03:33
(5 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฉ๐ช
reznekcs
2026-06-16 21:32:24
(5 days ago)
F2B wordpress ban. Logs: 86.99.36.214 - - [16/Jun/2026:23:32:13 +0200] "POST /xmlrpc.php HTTP/1.1" 2 ...
show more
F2B wordpress ban. Logs: 86.99.36.214 - - [16/Jun/2026:23:32:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4246 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
86.99.36.214 - - [16/Jun/2026:23:32:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4246 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
show less
Brute-Force
Web App Attack
Anonymous
2026-06-16 15:01:08
(5 days ago)
(wordpress) Failed wordpress login from 86.99.36.214 (AE/United Arab Emirates/bba-86-99-36-214.alsha ...
show more
(wordpress) Failed wordpress login from 86.99.36.214 (AE/United Arab Emirates/bba-86-99-36-214.alshamil.net.ae)
show less
Brute-Force
๐ฒ๐พ
Rizzy
2026-06-16 03:14:41
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack