๐จ๐ฟ
huginet
2026-05-20 13:34:49
(3 months ago)
103.148.93.5 - - [20/May/2026:15:34:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/13.0; ...
show more
103.148.93.5 - - [20/May/2026:15:34:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/13.0; WordPress/6.2; http://site67824917.com"
103.148.93.5 - - [20/May/2026:15:34:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)"
...
show less
Web Spam
Blog Spam
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-20 07:19:11
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in t ...
show more
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 03:19:03.168084 2026] [security2:error] [pid 29131:tid 29131] [client 103.148.93.5:65272] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.148.93.5 (+1 hits since last alert)|kairoslogammakmur.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kairoslogammakmur.com"] [uri "/xmlrpc.php"] [unique_id "ag1gZyxUyOpD7daVWNq9XwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-05-19 01:57:57
(3 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
5.93.zcomnetworks.com.pk
Web App Attack
Anonymous
2026-05-18 17:18:48
(3 months ago)
Attac
Brute-Force
๐ฉ๐ช
rh24
2026-05-18 10:29:08
(3 months ago)
(wordpress) Failed wordpress login from 103.148.93.5 (PK/Pakistan/5.93.zcomnetworks.com.pk): (CF_EN ...
show more
(wordpress) Failed wordpress login from 103.148.93.5 (PK/Pakistan/5.93.zcomnetworks.com.pk): (CF_ENABLE)
show less
Brute-Force
๐ฉ๐ช
Sรฉfora Srl
2026-04-27 16:01:55
(4 months ago)
Failed attempt detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐บ๐ธ
Dolutech.com
2026-04-26 11:03:49
(4 months ago)
WP Attack
Brute-Force
Web App Attack
๐บ๐ธ
integrantservices.com
2026-04-22 15:24:36
(4 months ago)
(wordpress) Failed wordpress login from 103.148.93.5 (PK/Pakistan/5.93.zcomnetworks.com.pk)
Brute-Force
๐ฎ๐น
Progetto1
2026-04-20 15:25:03
(4 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ซ๐ท
dynamix
2026-04-20 11:07:48
(4 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-16 06:29:19
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in t ...
show more
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 16 02:29:10.384047 2026] [security2:error] [pid 3124533:tid 3124533] [client 103.148.93.5:56851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.148.93.5 (+1 hits since last alert)|xhumanlikerobots.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "xhumanlikerobots.com"] [uri "/xmlrpc.php"] [unique_id "aeCBtnbX6lLyurLlM5rRbgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-15 17:15:18
(4 months ago)
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in t ...
show more
(mod_security) mod_security (id:240335) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 13:15:09.700195 2026] [security2:error] [pid 1569858:tid 1569858] [client 103.148.93.5:52132] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.148.93.5 (+1 hits since last alert)|jimrichardart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jimrichardart.com"] [uri "/xmlrpc.php"] [unique_id "ad_HnSIAB3bpGPvf0ulr-gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-04-13 10:19:43
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in t ...
show more
(mod_security) mod_security (id:225170) triggered by 103.148.93.5 (5.93.zcomnetworks.com.pk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 06:19:38.088648 2026] [security2:error] [pid 3622618:tid 3622633] [client 103.148.93.5:59255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thecraftsycat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thecraftsycat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adzDOkckH2qqauUcy1gnxQAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-04-12 15:50:44
(4 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
5.93.zcomnetworks.com.pk
Web App Attack
๐ซ๐ฎ
YF
2026-04-12 10:00:27
(4 months ago)
xmlrpc.php (Potential DDoS or brute force)
Brute-Force
Web App Attack