2026-07-20 09:12:29
(1 month ago)
[osotir.org] httpd-xmlrpc-post: sites=www.agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log ...
show more
[osotir.org] httpd-xmlrpc-post: sites=www.agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-07-18 12:45:18
(1 month ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
rh24
2026-07-18 09:42:21
(1 month ago)
(wordpress) Failed wordpress login from 151.158.120.15 (BD/Bangladesh/-): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-18 08:11:47
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 04:11:39.868610 2026] [security2:error] [pid 343533:tid 343533] [client 151.158.120.15:1828] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.120.15 (+1 hits since last alert)|blindshine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "blindshine.com"] [uri "/xmlrpc.php"] [unique_id "als1O9PaQUvNPStCnF_FpAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
F242
2026-07-17 15:20:07
(2 months ago)
Wordpress soft lock
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 14:52:44
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 10:52:37.251447 2026] [security2:error] [pid 98660:tid 98660] [client 151.158.120.15:4161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.120.15 (+1 hits since last alert)|suswastima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "suswastima.com"] [uri "/xmlrpc.php"] [unique_id "alpBtcnBmu4dvmZ22hM5_AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 12:09:25
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 08:09:21.311340 2026] [security2:error] [pid 482:tid 482] [client 151.158.120.15:8241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.120.15 (+1 hits since last alert)|jazziiafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jazziiafoundation.org"] [uri "/xmlrpc.php"] [unique_id "alobcZDpZmZH4Vt60uYIVAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-07-17 06:51:30
(2 months ago)
(xmlrpc_405) XMLRPC-Bot 405 151.158.120.15 (BD/Bangladesh/-)
Hacking
🇬🇧
Steve
2026-07-16 17:25:55
(2 months ago)
Abuse of XMLRPC
Brute-Force
Web App Attack
🇫🇷
NetDevOPS
2026-07-16 17:17:10
(2 months ago)
POST /xmlrpc.php | UA: Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-07-16 15:42:09
(2 months ago)
2026-07-16T17:42:08.871206+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 151 ...
show more
2026-07-16T17:42:08.871206+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication failure for-from 151.158.120.15
show less
Web App Attack
🇳🇱
Site.eu
2026-07-16 12:57:01
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-07-15 12:10:30
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 08:10:26.919294 2026] [security2:error] [pid 26735:tid 26735] [client 151.158.120.15:1525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.120.15 (+1 hits since last alert)|terfgunclub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "terfgunclub.com"] [uri "/xmlrpc.php"] [unique_id "ald4snfVyhJQy7sazroXcAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 10:08:13
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.120.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 06:08:07.989642 2026] [security2:error] [pid 20641:tid 20641] [client 151.158.120.15:9666] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.120.15 (+1 hits since last alert)|integrabroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "integrabroadcast.com"] [uri "/xmlrpc.php"] [unique_id "aldcBy3vtGxRLlA0Ao2IHwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-14 20:27:53
(2 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack