🇨🇭
4server
2026-07-06 11:57:38
(6 hours ago)
[MonJul0613:57:34.5034782026][security2:error][pid3325868:tid3325889][client188.163.72.169:0]ModSecu ...
show more
[MonJul0613:57:34.5034782026][security2:error][pid3325868:tid3325889][client188.163.72.169:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"turismo-marocco-lugano.ch\"][uri\"/xmlrpc.php\"][unique_id\"akuYLn3O3yhJTdPK6RSq6QAAAEE\"]
show less
Hacking
Web App Attack
🇫🇮
YF
2026-07-05 13:00:25
(1 day ago)
Attaque distribuée subnet
DDoS Attack
Web App Attack
🇳🇱
wlt-blocker
2026-07-05 12:40:01
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 04:23:47
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivst ...
show more
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:23:43.111493 2026] [security2:error] [pid 8479:tid 8479] [client 188.163.72.169:46542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cajunpicasso.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cajunpicasso.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akiKz1abGdtL9ImprVcDSwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 16:38:57
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivst ...
show more
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 12:38:53.475843 2026] [security2:error] [pid 27213:tid 27213] [client 188.163.72.169:46362] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||paguilar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "paguilar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akflnXTuQuOXkuKDY-zfCAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-03 13:45:05
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 12:02:30
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivst ...
show more
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:02:22.905412 2026] [security2:error] [pid 20334:tid 20334] [client 188.163.72.169:47037] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||greenlight.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greenlight.us"] [uri "/wp-json/wp/v2/users"] [unique_id "akekzuhuGucw64otAKMT9wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-03 10:07:10
(3 days ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-29 20:12:20
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivst ...
show more
(mod_security) mod_security (id:225170) triggered by 188.163.72.169 (188-163-72-169.broadband.kyivstar.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 16:12:12.700716 2026] [security2:error] [pid 9222:tid 9222] [client 188.163.72.169:46702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||havilahmalone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "havilahmalone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akLRnPGGVtzObz6xRIMyMQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-27 16:09:08
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇫🇷
Guardian
2026-06-27 13:02:57
(1 week ago)
Unauthorized connection attempt / Port scanning
188.163.72.169 [27/Jun/2026:13:02:56] "POST /xmlrpc. ...
show more
Unauthorized connection attempt / Port scanning
188.163.72.169 [27/Jun/2026:13:02:56] "POST /xmlrpc.php HTTP/1.1"
show less
Port Scan
Web App Attack
🇯🇵
warudora
2026-06-26 16:50:48
(1 week ago)
Automated Honeypot Trap: Attempted to access sensitive path '/xmlrpc.php' on a Flask server.
Hacking
Web App Attack
🇳🇱
wlt-blocker
2026-06-26 15:57:25
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
2026-06-26 15:08:04
(1 week ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
xmission.com
2026-06-25 17:11:13
(1 week ago)
188.163.72.169 - - [25/Jun/2026:11:11:13 -0600] "POST /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 ...
show more
188.163.72.169 - - [25/Jun/2026:11:11:13 -0600] "POST /xmlrpc.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36"
...
show less
Web App Attack