๐บ๐ธ
lostswordfish.com
2026-06-04 05:08:04
(3 days ago)
Wordfence waf block on pameganslaw
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 04:23:01
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 00:22:55.899427 2026] [security2:error] [pid 12577:tid 12577] [client 78.131.70.174:63186] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|brazilianbottom.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brazilianbottom.com"] [uri "/xmlrpc.php"] [unique_id "aiD9n02v4F-RHovo09khWwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
konseptit
2026-06-04 03:46:49
(3 days ago)
(wordpress) Failed wordpress login from 78.131.70.174 (HU/Hungary/78-131-70-174.pool.digikabel.hu)
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-04 02:31:35
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 22:31:30.192102 2026] [security2:error] [pid 10073:tid 10073] [client 78.131.70.174:58807] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|eileensharaga.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "aiDjgndO8pxK27WjSAlr6QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 18:13:21
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:13:17.647730 2026] [security2:error] [pid 23362:tid 23362] [client 78.131.70.174:59360] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|karenbernsteinlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "karenbernsteinlaw.com"] [uri "/xmlrpc.php"] [unique_id "aiBuvUGPXujoPwUS4vS_KwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-06-03 16:23:46
(3 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
HU/Hungary/78-131-70-174.pool.digikabel.hu
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 11:17:28
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:17:24.826143 2026] [security2:error] [pid 28164:tid 28173] [client 78.131.70.174:65511] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|thestoryofmyvoice.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thestoryofmyvoice.com"] [uri "/xmlrpc.php"] [unique_id "aiANRHzoflRTnY5QkQc27gAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-03 10:42:19
(4 days ago)
Attac
Brute-Force
๐ซ๐ท
YF
2026-06-03 01:25:21
(4 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-02 23:53:10
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 19:53:02.321704 2026] [security2:error] [pid 18665:tid 18665] [client 78.131.70.174:55807] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|kaylamaclaincounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kaylamaclaincounseling.com"] [uri "/xmlrpc.php"] [unique_id "ah9s3mk5znhvTV98R2ci2wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
integrantservices.com
2026-06-02 23:17:59
(4 days ago)
(wordpress) Failed wordpress login from 78.131.70.174 (HU/Hungary/78-131-70-174.pool.digikabel.hu)
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-06-02 18:29:10
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu) ...
show more
(mod_security) mod_security (id:240335) triggered by 78.131.70.174 (78-131-70-174.pool.digikabel.hu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 14:29:05.216668 2026] [security2:error] [pid 22719:tid 22719] [client 78.131.70.174:55273] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 78.131.70.174 (+1 hits since last alert)|mrccertification.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mrccertification.com"] [uri "/xmlrpc.php"] [unique_id "ah8g8UvVz_Ok9R4KptPyeAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-02 16:45:26
(4 days ago)
[server.tmg.gr] httpd-xmlrpc-post: sites=physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi ...
show more
[server.tmg.gr] httpd-xmlrpc-post: sites=physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack