2026-07-29 07:00:00
(2 days ago)
Automated Apache web application probing in selected 24h window; attempts=171, unique_paths=1, error ...
show more
Automated Apache web application probing in selected 24h window; attempts=171, unique_paths=1, error_responses=144; targets include WordPress, .env/.git, phpMyAdmin, autodiscover, wpad.dat and related probe paths.
show less
Web App Attack
2026-07-29 07:00:00
(2 days ago)
Apache probe; attempts=332; exact paths: /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 10:48:54
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:48:49.410821 2026] [security2:error] [pid 3735217:tid 3735245] [client 188.253.214.78:11161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 188.253.214.78 (+1 hits since last alert)|grupojdg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "grupojdg.com"] [uri "/xmlrpc.php"] [unique_id "amiJEZXcNVlUJL8XHYod5wAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-28 10:20:30
(2 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-28 10:14:23
(2 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-28 08:13:22
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 07:52:00
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 03:51:55.440352 2026] [security2:error] [pid 1806262:tid 1806262] [client 188.253.214.78:8278] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 188.253.214.78 (+1 hits since last alert)|milliondollarbelt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "milliondollarbelt.com"] [uri "/xmlrpc.php"] [unique_id "amhfm5uV9X2mLTVXbrYwmQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 00:27:28
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 20:27:22.004867 2026] [security2:error] [pid 317977:tid 317977] [client 188.253.214.78:1241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 188.253.214.78 (+1 hits since last alert)|circleinthesquare.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "circleinthesquare.org"] [uri "/xmlrpc.php"] [unique_id "amf3asf1WJgP7bZM_mp-rAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-28 00:19:31
(3 days ago)
188.253.214.78 - - [28/Jul/2026:02:18:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
188.253.214.78 - ...
show more
188.253.214.78 - - [28/Jul/2026:02:18:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
188.253.214.78 - - [28/Jul/2026:02:19:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428
...
show less
Brute-Force
Bad Web Bot
🇸🇪
konseptit
2026-07-27 23:50:00
(3 days ago)
(wordpress) Failed wordpress login from 188.253.214.78 (AZ/Azerbaijan/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-27 22:20:08
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:20:03.032734 2026] [security2:error] [pid 289236:tid 289236] [client 188.253.214.78:1220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 188.253.214.78 (+1 hits since last alert)|consolidatedoperationsgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "consolidatedoperationsgroup.com"] [uri "/xmlrpc.php"] [unique_id "amfZk9ZVRz4fCCTV1r3tqgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-07-27 12:51:35
(3 days ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 12:46:39
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 188.253.214.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:46:33.878160 2026] [security2:error] [pid 16024:tid 16024] [client 188.253.214.78:15336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 188.253.214.78 (+1 hits since last alert)|lowkeytiki.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lowkeytiki.com"] [uri "/xmlrpc.php"] [unique_id "amdTKeNQz3OBea5uQvg0zAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-13 09:20:10
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 17:48:39
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot