🇺🇸
integrantservices.com
2026-08-24 05:10:26
(23 hours ago)
(wordpress) Failed wordpress login from 94.16.18.54 (AT/Austria/-)
Brute-Force
🇩🇪
abdubhai
2026-08-24 04:01:52
(1 day ago)
94.16.18.54 - - [24/Aug/2026:09:
...
Brute-Force
🇩🇪
abdubhai
2026-08-24 03:40:07
(1 day ago)
94.16.18.54 - - [24/Aug/2026:08:
...
Brute-Force
🇫🇷
Kenshin869
2026-08-24 02:29:02
(1 day ago)
Wordpress unauthorized access attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-23 21:26:42
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:26:36.939266 2026] [security2:error] [pid 7652:tid 7652] [client 94.16.18.54:61017] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.16.18.54 (+1 hits since last alert)|415test.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "415test.com"] [uri "/xmlrpc.php"] [unique_id "aotljHeTNPNpEypoQxuDNwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 19:36:52
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 15:36:48.749145 2026] [security2:error] [pid 26649:tid 26649] [client 94.16.18.54:61363] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.16.18.54 (+1 hits since last alert)|yerevanpress.am|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "yerevanpress.am"] [uri "/xmlrpc.php"] [unique_id "aotL0JknSKtvp-REpwOOxwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-23 13:23:52
(1 day ago)
(wordpress) Failed wordpress login from 94.16.18.54 (AT/Austria/-)
Brute-Force
🇳🇱
Site.eu
2026-08-23 11:23:08
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-08-23 08:01:36
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 04:01:31.447536 2026] [security2:error] [pid 15392:tid 15392] [client 94.16.18.54:63812] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.16.18.54 (+1 hits since last alert)|abeltours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abeltours.com"] [uri "/xmlrpc.php"] [unique_id "aoqo27qQFY-EXmd_BrmUxgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-23 07:49:19
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 06:29:14
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 94.16.18.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 02:29:05.890768 2026] [security2:error] [pid 22358:tid 22358] [client 94.16.18.54:65242] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.16.18.54 (+1 hits since last alert)|brandoncomputergeeks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "brandoncomputergeeks.com"] [uri "/xmlrpc.php"] [unique_id "aoqTMXzkATmZXt36pZplmQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-23 05:55:35
(1 day ago)
Attempt to POST to xmlrpc.php
Brute-Force
Web App Attack
2026-08-23 05:08:02
(1 day ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇫🇮
YF
2026-08-23 04:30:40
(2 days ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
🇩🇪
LRob
2026-08-23 01:44:14
(2 days ago)
WordPress login brute-force | path: /xmlrpc.php
Brute-Force
Web App Attack