2026-07-28 16:23:36
(8 hours ago)
(wordpress) Failed wordpress login from 94.200.80.78 (AE/United Arab Emirates/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-27 16:21:03
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 12:20:59.491286 2026] [security2:error] [pid 1633875:tid 1633875] [client 94.200.80.78:59604] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|jonasrimkunas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jonasrimkunas.com"] [uri "/xmlrpc.php"] [unique_id "ameFawvn5gZm50BH_eKtFAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 13:09:27
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:09:22.371613 2026] [security2:error] [pid 2840776:tid 2840776] [client 94.200.80.78:62435] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|apexandroids.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "apexandroids.com"] [uri "/xmlrpc.php"] [unique_id "amYHAnyeSUAjUjTSkT6jGwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 16:13:50
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 12:13:47.303664 2026] [security2:error] [pid 1513:tid 1513] [client 94.200.80.78:61489] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|medusakenya.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "al-au62lILjJv7v9JatmywAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-20 16:19:40
(1 week ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇫🇷
masterguru
2026-07-10 17:16:39
(2 weeks ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇺🇸
TPI-Abuse
2026-06-14 06:25:24
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:25:21.419202 2026] [security2:error] [pid 15976:tid 15976] [client 94.200.80.78:59687] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|plazahacienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "plazahacienda.com"] [uri "/xmlrpc.php"] [unique_id "ai5JUTIzv5Y0VSH8yZjmwQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 14:48:33
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:48:30.422384 2026] [security2:error] [pid 13232:tid 13235] [client 94.200.80.78:62480] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|michaelrandon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michaelrandon.com"] [uri "/xmlrpc.php"] [unique_id "aiWEvkpTZ3icEh8-EVI6XwAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-06 17:05:10
(1 month ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-06-01 16:10:36
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 12:10:30.620363 2026] [security2:error] [pid 24288:tid 24288] [client 94.200.80.78:51443] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|professionalpianomoversinc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "professionalpianomoversinc.com"] [uri "/xmlrpc.php"] [unique_id "ah2u9t_icBjcFt0RQXAJrAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-01 15:40:10
(1 month ago)
Attac
Brute-Force
2026-05-31 08:53:14
(1 month ago)
Attac
Brute-Force
🇺🇸
TPI-Abuse
2026-05-30 16:22:04
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 94.200.80.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 12:21:56.519890 2026] [security2:error] [pid 28463:tid 28463] [client 94.200.80.78:56740] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.200.80.78 (+1 hits since last alert)|harwoodmechanical.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "harwoodmechanical.com"] [uri "/xmlrpc.php"] [unique_id "ahsOpBuxVNyn2O52cDGTkAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-29 15:12:20
(1 month ago)
Attac
Brute-Force
2026-05-28 13:51:15
(2 months ago)
Attac
Brute-Force