🇩🇪
[email protected]
2026-07-10 00:30:28
(6 hours ago)
...
Brute-Force
SSH
🇸🇪
konseptit
2026-07-08 16:31:57
(1 day ago)
(wordpress) Failed wordpress login from 101.53.250.30 (PK/Pakistan/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-08 06:52:45
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 02:52:33.357147 2026] [security2:error] [pid 30398:tid 30398] [client 101.53.250.30:38514] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 101.53.250.30 (+1 hits since last alert)|rentkase.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rentkase.com"] [uri "/xmlrpc.php"] [unique_id "ak3zsW8QcYq6lIcpzA5BEAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 06:19:04
(2 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 05:55:34
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 01:55:24.354596 2026] [security2:error] [pid 27319:tid 27357] [client 101.53.250.30:37295] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 101.53.250.30 (+1 hits since last alert)|mtiminis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mtiminis.com"] [uri "/xmlrpc.php"] [unique_id "ak3mTJBCmjsUODswzMp_CwAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 05:26:06
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 02:28:05
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 22:27:55.768363 2026] [security2:error] [pid 22518:tid 22518] [client 101.53.250.30:37937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 101.53.250.30 (+1 hits since last alert)|palumbodesigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "palumbodesigns.com"] [uri "/xmlrpc.php"] [unique_id "ak21q8YQa_xAu28z6F8IOgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-08 02:26:57
(2 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇧🇪
cmbplf
2026-07-07 23:04:11
(2 days ago)
2.956 requests from abuseipdb.com blacklisted IP (1yr10mos3w)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-07 05:01:11
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 01:01:02.070429 2026] [security2:error] [pid 16248:tid 16270] [client 101.53.250.30:37940] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 101.53.250.30 (+1 hits since last alert)|vinylnotespodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vinylnotespodcast.com"] [uri "/xmlrpc.php"] [unique_id "akyIDkw3_AH02bXRdbnBJwAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-07-07 03:27:53
(3 days ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇱
Site.eu
2026-07-06 22:19:06
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇦🇺
screwlooseit.com.au
2026-07-06 08:07:50
(3 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
PK/Pakistan/-
Web App Attack
🇫🇷
LRob
2026-07-06 03:26:19
(4 days ago)
CrowdSec: lrob/wp-xmlrpc-bf | req: ["/xmlrpc.php"] | UA: ["Jetpack by WordPress.com","WordPress.com; ...
show more
CrowdSec: lrob/wp-xmlrpc-bf | req: ["/xmlrpc.php"] | UA: ["Jetpack by WordPress.com","WordPress.com; https://wordpress.com"]
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 16:30:31
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 101.53.250.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 12:30:18.853174 2026] [security2:error] [pid 20939:tid 20939] [client 101.53.250.30:37262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 101.53.250.30 (+1 hits since last alert)|rotentendales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rotentendales.com"] [uri "/xmlrpc.php"] [unique_id "akqGmmW967FpXoNQFJmO4gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack