🇳🇱
debestelapp
2026-06-29 20:50:06
(6 hours ago)
Web App Attack
2026-06-29 19:16:34
(8 hours ago)
WordPress Brute Force
Brute-Force
🇺🇸
TPI-Abuse
2026-06-29 18:53:32
(8 hours ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 14:53:28.367768 2026] [security2:error] [pid 8791:tid 8791] [client 78.101.198.216:59796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|csm-dtc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "csm-dtc.com"] [uri "/xmlrpc.php"] [unique_id "akK_KNig58NmxQEbl1spjgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-06-29 17:49:24
(9 hours ago)
(wordpress) Failed wordpress login from 78.101.198.216 (QA/Qatar/-)
Brute-Force
🇫🇷
masterguru
2026-06-29 17:18:40
(10 hours ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
2026-06-29 15:47:28
(11 hours ago)
(wordpress) Failed wordpress login from 78.101.198.216 (QA/Qatar/-)
Brute-Force
🇬🇧
cg-design.co.uk
2026-06-29 12:12:11
(15 hours ago)
(wordpress) Failed wordpress login from 78.101.198.216 (QA/Qatar/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-29 05:21:32
(22 hours ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 01:21:27.932456 2026] [security2:error] [pid 14356:tid 14356] [client 78.101.198.216:10133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|clayrivers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "clayrivers.com"] [uri "/xmlrpc.php"] [unique_id "akIA17kuMz6G3Mfwlh87-QAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-29 01:33:43
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
2026-06-29 00:15:19
(1 day ago)
78.101.198.216 - - [29/Jun/2026:02:14:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "Jetpack/12. ...
show more
78.101.198.216 - - [29/Jun/2026:02:14:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "Jetpack/12.1; WordPress/6.2; http://site13785383.com"
78.101.198.216 - - [29/Jun/2026:02:14:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.1; WordPress/6.2; http://site13785383.com"
78.101.198.216 - - [29/Jun/2026:02:15:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "Jetpack by WordPress.com"
78.101.198.216 - - [29/Jun/2026:02:15:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com"
78.101.198.216 - - [29/Jun/2026:02:15:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 798 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)"
...
show less
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-06-28 22:08:55
(1 day ago)
(xmlrpc) Failed xmlrpc access from 78.101.198.216 (QA/Qatar/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
TPI-Abuse
2026-06-28 17:25:45
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 13:25:38.523142 2026] [security2:error] [pid 4902:tid 4902] [client 78.101.198.216:15919] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|knoxbestos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "knoxbestos.com"] [uri "/xmlrpc.php"] [unique_id "akFZEhxiyKoVvwePrbzkSwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 12:36:12
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 08:36:05.693341 2026] [security2:error] [pid 20454:tid 20454] [client 78.101.198.216:30397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|canebrakes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "canebrakes.com"] [uri "/xmlrpc.php"] [unique_id "akEVNWBt-EgF7A3agCmxCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 01:29:41
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 78.101.198.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 21:29:34.099404 2026] [security2:error] [pid 2127:tid 2127] [client 78.101.198.216:15503] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.101.198.216 (+1 hits since last alert)|guitarwisdom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "guitarwisdom.com"] [uri "/xmlrpc.php"] [unique_id "akB4_vowc2syxFcHNMgkpgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-06-27 22:53:43
(2 days ago)
(wordpress) Failed wordpress login from 78.101.198.216 (QA/Qatar/-)
Brute-Force