🇺🇸
TPI-Abuse
2026-06-15 14:10:36
(7 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 10:10:30.416940 2026] [security2:error] [pid 22602:tid 22602] [client 103.149.100.161:22068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|apuntesdeinversion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "apuntesdeinversion.com"] [uri "/xmlrpc.php"] [unique_id "ajAH1nY0eaS5zraqeZfTuQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 13:36:48
(7 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:14:26
(10 hours ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:14:20.949590 2026] [security2:error] [pid 30374:tid 30374] [client 103.149.100.161:2249] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|hawaiivacations.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hawaiivacations.com"] [uri "/xmlrpc.php"] [unique_id "ai_ejKOpfgHQILo252rQjAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-15 09:41:08
(11 hours ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 12:27:05
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 08:27:00.102297 2026] [security2:error] [pid 8311:tid 8311] [client 103.149.100.161:54974] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|kildarafarms.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kildarafarms.com"] [uri "/xmlrpc.php"] [unique_id "ai6eFHl5fNl_5R_d97NDIgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 10:35:39
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:35:33.379497 2026] [security2:error] [pid 25433:tid 25433] [client 103.149.100.161:58043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|rdhtrucking.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rdhtrucking.com"] [uri "/xmlrpc.php"] [unique_id "ai6D9eJ1CUV5hilo3ZfoAAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 08:44:13
(1 day ago)
Attac
Brute-Force
2026-06-14 08:30:50
(1 day ago)
Blocked by ModSec and CSF
Port Scan
🇩🇪
grassau.com
2026-06-12 13:03:03
(3 days ago)
(wordpress) Failed wordpress login from 103.149.100.161 (PH/Philippines/-/-/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-12 11:34:33
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:34:29.727085 2026] [security2:error] [pid 8749:tid 8749] [client 103.149.100.161:48068] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|lambert-heating-and-air.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lambert-heating-and-air.com"] [uri "/xmlrpc.php"] [unique_id "aivuxZaNlMaP-jp8qijklQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-12 11:32:10
(3 days ago)
(wordpress) Failed wordpress login from 103.149.100.161 (PH/Philippines/-)
Brute-Force
🇲🇾
Rizzy
2026-06-09 12:45:24
(6 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 05:22:29
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 103.149.100.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 01:22:23.204896 2026] [security2:error] [pid 7939:tid 7939] [client 103.149.100.161:19882] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.149.100.161 (+1 hits since last alert)|kdgsf.xyz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kdgsf.xyz"] [uri "/xmlrpc.php"] [unique_id "aiUAD0wfcOWFTzNsYDw94wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-06-07 05:21:13
(1 week ago)
Wordpress Vunerability attack
Web App Attack