🇩🇪
ghostwarriors
2026-07-17 12:50:16
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-17 12:24:45
(3 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
Jason Howell
2026-07-16 16:13:46
(4 days ago)
160.250.51.185 - - [16/Jul/2026:11:11:26 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4360 "-" "Jetpack/12 ...
show more
160.250.51.185 - - [16/Jul/2026:11:11:26 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4360 "-" "Jetpack/12.0; WordPress/6.3; http://site61022044.com"
160.250.51.185 - - [16/Jul/2026:11:13:12 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4358 "-" "Jetpack/12.1; WordPress/6.3; http://site86434308.com"
160.250.51.185 - - [16/Jul/2026:11:13:23 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "Jetpack by WordPress.com"
160.250.51.185 - - [16/Jul/2026:11:13:37 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4359 "-" "WordPress.com; https://wordpress.com"
160.250.51.185 - - [16/Jul/2026:11:13:45 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4360 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
...
show less
Web App Attack
2026-07-16 11:59:23
(4 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 09:31:13
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 05:31:05.508136 2026] [security2:error] [pid 30652:tid 30679] [client 160.250.51.185:53887] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|fastestcopyright.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fastestcopyright.com"] [uri "/xmlrpc.php"] [unique_id "alik2b73aVJjPinlBb8fgQAAAoM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-07-15 15:50:48
(5 days ago)
(wordpress) Failed wordpress login from 160.250.51.185 (PK/Pakistan/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-14 18:52:56
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 14:52:51.667480 2026] [security2:error] [pid 5983:tid 5983] [client 160.250.51.185:54528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|vzan.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vzan.org"] [uri "/xmlrpc.php"] [unique_id "alaFg9ZM6LYLM6Gp8-RESQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-14 18:50:04
(5 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 18:20:54
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 14:20:46.927765 2026] [security2:error] [pid 13028:tid 13028] [client 160.250.51.185:56705] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|serranoscoffee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "serranoscoffee.com"] [uri "/xmlrpc.php"] [unique_id "alZ9_m3yjOy4UGp2XsWQpAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-14 14:50:34
(6 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 14:37:39
(6 days ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 10:37:35.368053 2026] [security2:error] [pid 22081:tid 22081] [client 160.250.51.185:60207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|d-sinema.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d-sinema.com"] [uri "/xmlrpc.php"] [unique_id "alZJr5GIvKlgTvAmk9rh9gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-14 14:33:09
(6 days ago)
[redacted] 160.250.51.185 - - [14/Jul/2026:16:32:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ...
show more
[redacted] 160.250.51.185 - - [14/Jul/2026:16:32:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 160.250.51.185 - - [14/Jul/2026:16:32:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 160.250.51.185 - - [14/Jul/2026:16:32:47 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site22719719.com"
[redacted] 160.250.51.185 - - [14/Jul/2026:16:33:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 160.250.51.185 - - [14/Jul/2026:16:33:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
2026-07-14 14:32:56
(6 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 18:21:16
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 14:21:12.422440 2026] [security2:error] [pid 10378:tid 10378] [client 160.250.51.185:64190] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|wwfstudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "wwfstudio.com"] [uri "/xmlrpc.php"] [unique_id "alUsmBNIWqlzvAa8eqgNGwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 16:58:38
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 160.250.51.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 12:58:33.801955 2026] [security2:error] [pid 30535:tid 30535] [client 160.250.51.185:57816] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 160.250.51.185 (+1 hits since last alert)|bosdkbook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bosdkbook.com"] [uri "/xmlrpc.php"] [unique_id "alUZOd4G4NcJG73ykjOm_QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack