🇺🇸
TPI-Abuse
2026-07-23 06:50:27
(23 hours ago)
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 02:50:19.138572 2026] [security2:error] [pid 1797962:tid 1797962] [client 196.74.218.15:53920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.74.218.15 (+1 hits since last alert)|prayers4america.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "prayers4america.com"] [uri "/xmlrpc.php"] [unique_id "amG5q_2vy-8TjYvPbS7-BAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-23 02:30:58
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-07-23 02:00:53
(1 day ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-07-22 23:07:40
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 19:07:32.032969 2026] [security2:error] [pid 3129466:tid 3129466] [client 196.74.218.15:49234] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.74.218.15 (+1 hits since last alert)|lightningbug.farm|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightningbug.farm"] [uri "/xmlrpc.php"] [unique_id "amFNNCsP8-Gb2aEKKtXvUgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-22 20:22:03
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
Kenshin869
2026-07-22 19:19:20
(1 day ago)
Wordpress unauthorized access attempt
Brute-Force
🇪🇸
alferez
2026-07-22 18:27:27
(1 day ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
🇹🇷
ycoskun41
2026-07-22 18:17:32
(1 day ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 16:49:19
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 12:49:16.164433 2026] [security2:error] [pid 1008307:tid 1008307] [client 196.74.218.15:58551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.74.218.15 (+1 hits since last alert)|tell-me-first.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tell-me-first.com"] [uri "/xmlrpc.php"] [unique_id "amD0jLSURrOv8TxfdBETMAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-07-22 11:07:34
(1 day ago)
(xmlrpc) Failed xmlrpc access from 196.74.218.15 (MA/Morocco/-): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
grassau.com
2026-07-22 11:07:02
(1 day ago)
(wordpress) Failed wordpress login from 196.74.218.15 (MA/Morocco/Rabat-Salé-Kénitra/Rabat/-)
Brute-Force
🇫🇮
YF
2026-07-22 09:00:50
(1 day ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-07-22 08:35:06
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 04:35:01.695921 2026] [security2:error] [pid 22611:tid 22624] [client 196.74.218.15:51029] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.74.218.15 (+1 hits since last alert)|asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "asetiadi.net"] [uri "/xmlrpc.php"] [unique_id "amCAtZvufGTyj4cN4PaRUAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 05:30:07
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 196.74.218.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:29:59.991332 2026] [security2:error] [pid 375165:tid 375165] [client 196.74.218.15:56774] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 196.74.218.15 (+1 hits since last alert)|theyoungstrategist.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "theyoungstrategist.com"] [uri "/xmlrpc.php"] [unique_id "amBVV958Y7MNKQNajp7fUAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-07-22 05:28:28
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack