🇪🇸
masterguru
2026-06-28 22:08:55
(1 hour ago)
(xmlrpc) Failed xmlrpc access from 78.101.198.216 (QA/Qatar/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
TPI-Abuse
2026-06-28 17:25:45
(6 hours ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:25:38.523142 2026] [security2:error] [pid 4902:tid 4902] [client 78.101.198.216:15919] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|knoxbestos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "knoxbestos.com"] [uri "/xmlrpc.php"] [unique_id "akFZEhxiyKoVvwePrbzkSwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 12:36:12
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:36:05.693341 2026] [security2:error] [pid 20454:tid 20454] [client 78.101.198.216:30397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|canebrakes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "canebrakes.com"] [uri "/xmlrpc.php"] [unique_id "akEVNWBt-EgF7A3agCmxCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 01:29:41
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 21:29:34.099404 2026] [security2:error] [pid 2127:tid 2127] [client 78.101.198.216:15503] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|guitarwisdom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guitarwisdom.com"] [uri "/xmlrpc.php"] [unique_id "akB4_vowc2syxFcHNMgkpgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-06-27 22:53:43
(1 day ago)
(wordpress) Failed wordpress login from 78.101.198.216 (QA/Qatar/-)
Brute-Force
🇫🇷
dynamix
2026-06-27 22:22:31
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 19:41:05
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:40:59.126149 2026] [security2:error] [pid 4657:tid 4657] [client 78.101.198.216:49716] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|palumbodesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "palumbodesigns.com"] [uri "/xmlrpc.php"] [unique_id "akAnSyQybcx1-lFYMYZYBQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 19:10:09
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 15:10:01.613972 2026] [security2:error] [pid 15323:tid 15323] [client 78.101.198.216:30331] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|integrabroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "integrabroadcast.com"] [uri "/xmlrpc.php"] [unique_id "akAgCYmPm7l0Vgz1eBAPIAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-27 17:06:04
(1 day ago)
Trying to access config files
Web App Attack
🇳🇱
wlt-blocker
2026-06-27 15:26:34
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 14:53:09
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 10:53:02.504580 2026] [security2:error] [pid 3464:tid 3464] [client 78.101.198.216:57503] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|cynosurephotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cynosurephotography.com"] [uri "/xmlrpc.php"] [unique_id "aj_jzpJvJY7MMAlFkXd89wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack