Anonymous
2026-06-27 21:39:42
(2 hours ago)
[redacted] 104.28.166.18 - - [27/Jun/2026:23:38:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 104.28.166.18 - - [27/Jun/2026:23:38:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site78378338.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:23:39:07 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
[redacted] 104.28.166.18 - - [27/Jun/2026:23:39:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 104.28.166.18 - - [27/Jun/2026:23:39:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:23:39:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
Anonymous
2026-06-27 19:26:11
(5 hours ago)
[redacted] 104.28.166.18 - - [27/Jun/2026:21:25:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ...
show more
[redacted] 104.28.166.18 - - [27/Jun/2026:21:25:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:21:25:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:21:25:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:21:26:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.2; http://site32048656.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:21:26:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site70222344.com"
...
show less
Hacking
Web App Attack
Anonymous
2026-06-27 12:25:05
(12 hours ago)
[redacted] 104.28.166.18 - - [27/Jun/2026:14:24:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 104.28.166.18 - - [27/Jun/2026:14:24:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
[redacted] 104.28.166.18 - - [27/Jun/2026:14:24:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)"
[redacted] 104.28.166.18 - - [27/Jun/2026:14:24:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 104.28.166.18 - - [27/Jun/2026:14:24:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
[redacted] 104.28.166.18 - - [27/Jun/2026:14:25:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
...
show less
Hacking
Web App Attack
๐ฑ๐ป
garmtech.com
2026-06-27 10:57:50
(13 hours ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS
Web App Attack
๐ฑ๐ป
garmtech.com
2026-06-27 10:49:01
(13 hours ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
๐ซ๐ท
masterguru
2026-06-27 10:42:19
(13 hours ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
๐ซ๐ท
dynamix
2026-06-27 02:07:40
(22 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-06-24 17:39:53
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-23 20:27:17
(4 days ago)
(mod_security) mod_security (id:240335) triggered by 104.28.166.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 104.28.166.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:27:13.272599 2026] [security2:error] [pid 10792:tid 10792] [client 104.28.166.18:62987] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 104.28.166.18 (+1 hits since last alert)|certifiedfarmersmarkets.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "certifiedfarmersmarkets.org"] [uri "/xmlrpc.php"] [unique_id "ajrsIZuI_KjuXxs9QHEXOQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
akasolutions.de
2026-06-23 20:22:29
(4 days ago)
(wordpress) Failed wordpress login from 104.28.166.18 (BR/Brazil/-)
Brute-Force
๐ง๐ท
Aparicio
2026-06-22 14:01:00
(5 days ago)
Multiple SLQ Injection Attempts in a minute
SQL Injection
๐ซ๐ท
dynamix
2026-06-20 12:43:42
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-06-20 07:44:47
(1 week ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
๐ซ๐ท
dynamix
2026-06-15 22:05:58
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฉ๐ช
grassau.com
2026-06-15 17:19:34
(1 week ago)
(wordpress) Failed wordpress login from 104.28.166.18 (BR/Brazil/Sรฃo Paulo/Sรฃo Paulo/-)
Brute-Force