๐ซ๐ท
masterguru
2026-06-10 15:54:59
(1 week ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
Anonymous
2026-06-08 15:00:04
(1 week ago)
Web App Attack, Hacking
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-07 14:51:07
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.co ...
show more
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 10:51:03.943386 2026] [security2:error] [pid 25148:tid 25148] [client 120.29.69.177:62176] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.29.69.177 (+1 hits since last alert)|cmcnow.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cmcnow.net"] [uri "/xmlrpc.php"] [unique_id "aiWFV9jnjnA-8fyO-SNzgAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-05 16:04:00
(2 weeks ago)
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site78418472.com"
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site53215727.com"
[redacted] 120.29.69.177 - - [05/Jun/2026:18:03:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site78345911.com"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-05 14:34:57
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.co ...
show more
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:34:53.830449 2026] [security2:error] [pid 22474:tid 22474] [client 120.29.69.177:35319] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.29.69.177 (+1 hits since last alert)|fusteriafontane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fusteriafontane.com"] [uri "/xmlrpc.php"] [unique_id "aiLejZUkkuYdjGTmz8EIegAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-05 13:21:53
(2 weeks ago)
[server.tmg.gr] httpd-xmlrpc-post: sites=physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi ...
show more
[server.tmg.gr] httpd-xmlrpc-post: sites=physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 16:07:53
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.co ...
show more
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:07:45.200206 2026] [security2:error] [pid 30835:tid 30835] [client 120.29.69.177:34682] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.29.69.177 (+1 hits since last alert)|walkercline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "walkercline.com"] [uri "/xmlrpc.php"] [unique_id "aiGi0d0REwhvOcyGrWbu-gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
applemooz
2026-06-04 16:05:13
(2 weeks ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-06-03 15:51:31
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-02 16:00:07
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.co ...
show more
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 11:59:58.844157 2026] [security2:error] [pid 10313:tid 10313] [client 120.29.69.177:25725] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.29.69.177 (+1 hits since last alert)|admiralpointe.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "admiralpointe.com"] [uri "/xmlrpc.php"] [unique_id "ah79_prIqoRYL9Vo286M6gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-01 14:18:56
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.co ...
show more
(mod_security) mod_security (id:240335) triggered by 120.29.69.177 (177.69.29.120-rev.convergeict.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 10:18:51.286561 2026] [security2:error] [pid 9835:tid 9835] [client 120.29.69.177:40504] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 120.29.69.177 (+1 hits since last alert)|nessmonsters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nessmonsters.com"] [uri "/xmlrpc.php"] [unique_id "ah2Uy_BzrYQh489ar7t3EgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-05-29 12:46:18
(3 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
Anonymous
2026-05-28 14:26:43
(3 weeks ago)
Attac
Brute-Force
Anonymous
2026-05-27 12:08:49
(3 weeks ago)
Attac
Brute-Force
Anonymous
2025-09-03 05:36:37
(9 months ago)
wordpress-trap
Web App Attack