๐ณ๐ฑ
Site.eu
2026-07-08 11:58:04
(16 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-07-08 11:16:00
(17 hours ago)
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" ...
show more
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:26 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 150.129.110.115 - - [08/Jul/2026:13:15:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
...
show less
Hacking
Web App Attack
Anonymous
2026-07-08 08:46:00
(19 hours ago)
Bad Web Bot
Web App Attack
Anonymous
2026-07-07 10:06:04
(1 day ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-07-06 16:46:45
(2 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-06 13:49:04
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:48:52.149127 2026] [security2:error] [pid 2238:tid 2238] [client 150.129.110.115:6681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.129.110.115 (+1 hits since last alert)|terfgunclub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "terfgunclub.com"] [uri "/xmlrpc.php"] [unique_id "akuyROwaFpm0rnaC_tywpgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-05 18:21:26
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 14:21:15.524724 2026] [security2:error] [pid 20537:tid 20537] [client 150.129.110.115:20577] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.129.110.115 (+1 hits since last alert)|ideaofauniversity.website|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ideaofauniversity.website"] [uri "/xmlrpc.php"] [unique_id "akqgm-lHe2Aqpn9ampWongAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-05 17:22:45
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 150.129.110.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 13:22:36.061353 2026] [security2:error] [pid 30355:tid 30355] [client 150.129.110.115:20920] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 150.129.110.115 (+1 hits since last alert)|meganmurph.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "meganmurph.com"] [uri "/xmlrpc.php"] [unique_id "akqS3MnS8meid9yQm7DmIAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-07-05 17:17:34
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Anonymous
2026-07-05 13:15:26
(3 days ago)
(wordpress) Failed wordpress login from 150.129.110.115 (IN/India/-)
Brute-Force
๐บ๐ธ
cwytech
2026-07-05 12:14:08
(3 days ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-geofence-sus.
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-07-05 07:10:03
(3 days ago)
(wordpress) Failed wordpress login from 150.129.110.115 (IN/India/-): (CF_ENABLE)
Brute-Force
Anonymous
2026-07-05 05:30:19
(3 days ago)
150.129.110.115 - - [05/Jul/2026:07:29:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by ...
show more
150.129.110.115 - - [05/Jul/2026:07:29:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
150.129.110.115 - - [05/Jul/2026:07:29:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com"
150.129.110.115 - - [05/Jul/2026:07:29:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com"
150.129.110.115 - - [05/Jul/2026:07:30:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
150.129.110.115 - - [05/Jul/2026:07:30:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack/12.1; WordPress/6.2; http://site19616069.com"
...
show less
Brute-Force
Web App Attack