🇺🇸
TPI-Abuse
2026-07-08 20:56:49
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 16:56:43.226922 2026] [security2:error] [pid 22673:tid 22673] [client 38.50.44.177:62253] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.50.44.177 (+1 hits since last alert)|souldata.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "souldata.com"] [uri "/xmlrpc.php"] [unique_id "ak65i72r99kNOvcvhWB-DgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-07-08 20:53:21
(1 day ago)
38.50.44.177 - - [08/Jul/2026:22:53:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 475 "-" "Jetpack/13.0; ...
show more
38.50.44.177 - - [08/Jul/2026:22:53:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 475 "-" "Jetpack/13.0; WordPress/6.2; http://site74814195.com"
38.50.44.177 - - [08/Jul/2026:22:53:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 475 "-" "Jetpack/12.5; WordPress/6.2; http://site57091788.com"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 20:37:05
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 16:36:59.903634 2026] [security2:error] [pid 8499:tid 8499] [client 38.50.44.177:53121] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.50.44.177 (+1 hits since last alert)|gasoilliquidsdaily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gasoilliquidsdaily.com"] [uri "/xmlrpc.php"] [unique_id "ak6065ZLq2v-YQfOHEf8DgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-07-08 19:23:55
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 19:46:22
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:46:15.450013 2026] [security2:error] [pid 13305:tid 13305] [client 38.50.44.177:57705] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.50.44.177 (+1 hits since last alert)|coyotebytes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "coyotebytes.com"] [uri "/xmlrpc.php"] [unique_id "akwGBzQvPyYITiGZCgPn8AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-03 20:46:34
(6 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
2026-07-03 20:46:26
(6 days ago)
(wordpress) Failed wordpress login from 38.50.44.177 (DO/Dominican Republic/-)
Brute-Force
🇦🇺
screwlooseit.com.au
2026-06-30 20:25:45
(1 week ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 19:46:25
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:46:21.154472 2026] [security2:error] [pid 27408:tid 27408] [client 38.50.44.177:49567] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.50.44.177 (+1 hits since last alert)|dorismitchell.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dorismitchell.com"] [uri "/xmlrpc.php"] [unique_id "akQdDSgPS7EOhXyOdYvj-AAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 19:16:23
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 38.50.44.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 15:16:17.026720 2026] [security2:error] [pid 27744:tid 27744] [client 38.50.44.177:63582] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 38.50.44.177 (+1 hits since last alert)|tonytremblayauthor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tonytremblayauthor.com"] [uri "/xmlrpc.php"] [unique_id "akQWAaxKKk25OyJeStLKYAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-25 06:51:00
(2 weeks ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇹🇷
Threat.live
2026-06-17 15:45:09
(3 weeks ago)
Suspicious Connection Attempts
Brute-Force
🇩🇪
Vegascosmetics
2026-06-15 08:19:38
(3 weeks ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇫🇷
Petre 21_ip
2026-05-24 06:41:54
(1 month ago)
2026-05-24T08:41:53.812571+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-05-24T08:41:53.812571+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=38.50.44.177 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=38209 PROTO=TCP SPT=27054 DPT=23 WINDOW=23440 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
MPL
2026-05-24 05:54:00
(1 month ago)
tcp/23
Port Scan