🇩🇪
ghostwarriors
2026-07-27 14:50:40
(1 hour ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 14:37:58
(1 hour ago)
(wordpress) Failed wordpress login from 150.107.9.14 (IN/India/-)
Brute-Force
2026-07-27 14:35:09
(1 hour ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 01:01:36
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 21:01:26.700110 2026] [security2:error] [pid 2553917:tid 2553917] [client 150.107.9.14:8754] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.107.9.14 (+1 hits since last alert)|onlinesuretybonds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "onlinesuretybonds.com"] [uri "/xmlrpc.php"] [unique_id "amVcZr3mPFTQx_lOwEuQOwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 17:59:28
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 13:59:18.404427 2026] [security2:error] [pid 1421517:tid 1421517] [client 150.107.9.14:21720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.107.9.14 (+1 hits since last alert)|geriterry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "geriterry.com"] [uri "/xmlrpc.php"] [unique_id "amT5doSQJcN4qqIs-ZX3xQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-07-25 17:57:39
(1 day ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack
🇩🇪
Tha_14
2026-07-25 16:55:58
(1 day ago)
Limit on login attempts is reached
Brute-Force
🇺🇸
TPI-Abuse
2026-07-25 14:54:57
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 10:54:43.608676 2026] [security2:error] [pid 651355:tid 651355] [client 150.107.9.14:22469] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.107.9.14 (+1 hits since last alert)|cynosurephotography.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cynosurephotography.com"] [uri "/xmlrpc.php"] [unique_id "amTOM3HEqCSq-1d4e8YoygAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-07-25 14:00:28
(2 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇳🇱
Site.eu
2026-07-25 12:26:48
(2 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-25 11:40:26
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 150.107.9.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:40:12.260242 2026] [security2:error] [pid 3954716:tid 3954716] [client 150.107.9.14:22053] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.107.9.14 (+1 hits since last alert)|realclean.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "realclean.net"] [uri "/xmlrpc.php"] [unique_id "amSgnKvXYfnGz27rw8LkmwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-07-25 07:54:19
(2 days ago)
(wordpress) Failed wordpress login from 150.107.9.14 (IN/India/-)
Brute-Force
2026-07-25 04:34:04
(2 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇪🇸
alferez
2026-07-25 04:21:22
(2 days ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
2026-07-25 00:28:35
(2 days ago)
[redacted] 150.107.9.14 - - [25/Jul/2026:02:27:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 150.107.9.14 - - [25/Jul/2026:02:27:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
[redacted] 150.107.9.14 - - [25/Jul/2026:02:28:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 150.107.9.14 - - [25/Jul/2026:02:28:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 150.107.9.14 - - [25/Jul/2026:02:28:23 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 150.107.9.14 - - [25/Jul/2026:02:28:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack