🇩🇪
konseptit
2026-08-22 09:08:06
(17 hours ago)
(wordpress) Failed wordpress login from 36.78.110.205 (ID/Indonesia/-)
Brute-Force
🇲🇾
Rizzy
2026-08-22 07:06:03
(19 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
grassau.com
2026-08-22 03:31:08
(23 hours ago)
(wordpress) Failed wordpress login from 36.78.110.205 (ID/Indonesia/East Java/Surabaya/-)
Brute-Force
🇩🇪
rh24
2026-08-21 08:20:41
(1 day ago)
(wordpress) Failed wordpress login from 36.78.110.205 (ID/Indonesia/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-08-20 02:34:41
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 22:34:29.848870 2026] [security2:error] [pid 31708:tid 31708] [client 36.78.110.205:59664] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|abilityimprinting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abilityimprinting.com"] [uri "/xmlrpc.php"] [unique_id "aoZntT6LvN0eLxKgxNWqrQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-20 01:33:46
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 21:33:32.978931 2026] [security2:error] [pid 19566:tid 19566] [client 36.78.110.205:30971] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|loneoakhoney.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "loneoakhoney.com"] [uri "/xmlrpc.php"] [unique_id "aoZZbB_h3FWJzyD0YFC55AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 18:36:29
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 14:36:17.038272 2026] [security2:error] [pid 2441:tid 2441] [client 36.78.110.205:9289] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|celltechs.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "celltechs.net"] [uri "/xmlrpc.php"] [unique_id "aoX3oVDRVvHp71ZNF1l-TQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 17:34:10
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 13:33:56.769330 2026] [security2:error] [pid 13189:tid 13189] [client 36.78.110.205:59758] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superlamb.com"] [uri "/xmlrpc.php"] [unique_id "aoXpBGgPfFt9ZzHLhlw4dAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-08-19 14:40:08
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 14:01:25
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 10:01:16.181299 2026] [security2:error] [pid 8690:tid 8829] [client 36.78.110.205:55084] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|sweeneyzone.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sweeneyzone.com"] [uri "/xmlrpc.php"] [unique_id "aoW3LKp3spiEvm-Fqig3GgAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-08-19 13:43:46
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇷
dynamix
2026-08-19 11:23:49
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇮🇹
Progetto1
2026-08-19 11:00:04
(3 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 10:55:40
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 06:55:27.592007 2026] [security2:error] [pid 17610:tid 17610] [client 36.78.110.205:57704] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|iplantotravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iplantotravel.com"] [uri "/xmlrpc.php"] [unique_id "aoWLn3cdwOOq8Wc5xviB1wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 08:42:52
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 36.78.110.205 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 04:42:35.427771 2026] [security2:error] [pid 29410:tid 29410] [client 36.78.110.205:57907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 36.78.110.205 (+1 hits since last alert)|sarrisbilliards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sarrisbilliards.com"] [uri "/xmlrpc.php"] [unique_id "aoVse9jJ8lwAKPcJK40-bAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack