🇺🇸
TPI-Abuse
2026-06-08 15:38:07
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:38:02.500119 2026] [security2:error] [pid 11680:tid 11680] [client 98.98.33.57:60859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.33.57 (+1 hits since last alert)|odysseydogasporlari.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "aibh2l4CrfH17QsWcURg8AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
sshtmp
2026-05-22 00:39:11
(3 weeks ago)
[AbuseIPDB auto-report]
Attack: WordPress XML-RPC brute-force
Hits: 116 | First: 2026-05-22T00:00:52 ...
show more
[AbuseIPDB auto-report]
Attack: WordPress XML-RPC brute-force
Hits: 116 | First: 2026-05-22T00:00:52+02:00 | Last: 2026-05-22T02:39:11+02:00
Samples: POST /xmlrpc.php [200]
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 22:28:38
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 18:28:31.933949 2026] [security2:error] [pid 3411:tid 3411] [client 98.98.33.57:62643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.33.57 (+1 hits since last alert)|thesalonx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ag-HDxpwi1GZBRxndAxL0QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-04-17 03:04:57
(2 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇺🇸
oncord
2026-04-04 21:55:32
(2 months ago)
Form spam
Web Spam
🇮🇹
[email protected]
2026-03-30 23:09:23
(2 months ago)
[Tue Mar 31 01:09:22.825168 2026] [authz_core:error] [pid 2071050:tid 2071112] [client 98.98.33.57:5 ...
show more
[Tue Mar 31 01:09:22.825168 2026] [authz_core:error] [pid 2071050:tid 2071112] [client 98.98.33.57:50296] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 16:51:17
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 98.98.33.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:51:12.115207 2026] [security2:error] [pid 29482:tid 29482] [client 98.98.33.57:56302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 98.98.33.57 (+1 hits since last alert)|www.goddesskink.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.goddesskink.com"] [uri "/new/xmlrpc.php"] [unique_id "aYtiAOLHDt_tfZatbnaLaQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2025-12-21 02:05:03
(5 months ago)
1.780 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇦🇺
screwlooseit.com.au
2025-12-21 00:00:49
(5 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
🇮🇹
VHosting
2025-12-21 00:00:07
(5 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇷🇸
Smel
2025-03-29 01:19:08
(1 year ago)
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam
Hacking
Brute-Force
🇨🇦
ISPLtd
2025-03-28 20:35:00
(1 year ago)
Spoofed server name, TO and FROM identical
Email Spam
Spoofing
🇪🇸
librebit
2025-03-26 01:38:14
(1 year ago)
Brute force
Brute-Force
🇫🇷
Sklurk
2024-12-24 15:09:03
(1 year ago)
Web App Attack
Web App Attack
🇹🇷
rtbh.com.tr
2024-12-10 20:52:49
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force