🇺🇸
TPI-Abuse
2026-06-18 04:30:32
(47 minutes ago)
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 00:30:25.959047 2026] [security2:error] [pid 28472:tid 28472] [client 91.211.236.248:31366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 91.211.236.248 (+1 hits since last alert)|celebritybikinigossip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celebritybikinigossip.com"] [uri "/xmlrpc.php"] [unique_id "ajN0YUyE_MVZQl59L8R17AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-18 00:12:04
(5 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 23:42:17
(5 hours ago)
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 19:42:10.993682 2026] [security2:error] [pid 10939:tid 10939] [client 91.211.236.248:30719] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 91.211.236.248 (+1 hits since last alert)|interiorsolutions-stuart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "interiorsolutions-stuart.com"] [uri "/xmlrpc.php"] [unique_id "ajMw0jBf7oh7M3TFx3yx7AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-17 22:08:27
(7 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
RU/Russia/-
Web App Attack
🇫🇷
dynamix
2026-06-17 21:37:37
(7 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 20:56:40
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 16:56:34.667482 2026] [security2:error] [pid 13828:tid 13853] [client 91.211.236.248:29557] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 91.211.236.248 (+1 hits since last alert)|whatismetamodern.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "whatismetamodern.com"] [uri "/xmlrpc.php"] [unique_id "ajG4gis-tqYo92Ystfi-5wAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 17:52:30
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 91.211.236.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 13:52:23.740166 2026] [security2:error] [pid 31054:tid 31054] [client 91.211.236.248:29687] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 91.211.236.248 (+1 hits since last alert)|esysapps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "esysapps.com"] [uri "/xmlrpc.php"] [unique_id "ajGNVztWPBq36KUeL8f56AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-16 17:50:51
(1 day ago)
Bad Web Bot
Web App Attack
🇰🇷
zlhIcd
2026-06-16 00:12:49
(2 days ago)
91.211.236.248 - - [15/Jun/2026:19:33:51 +0900] "GET /pcwiki/index.php?days=14&from=20251227212422&h ...
show more
91.211.236.248 - - [15/Jun/2026:19:33:51 +0900] "GET /pcwiki/index.php?days=14&from=20251227212422&hideliu=1&hideminor=1&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:131.0) Gecko/20100101 Firefox/131.0"
...
show less
Web Spam
SQL Injection
Bad Web Bot
Web App Attack