🇫🇷
masterguru
2026-07-06 13:25:59
(13 hours ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇨🇦
polycoda
2026-07-06 12:25:48
(14 hours ago)
AutoBlock: 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based)
Brute-Force
Web App Attack
2026-07-06 10:14:59
(16 hours ago)
Fail2ban filtered
...
Web App Attack
🇺🇸
WeekendWeb
2026-07-06 08:59:48
(17 hours ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 08:45:49
(18 hours ago)
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:45:45.767305 2026] [security2:error] [pid 23629:tid 23629] [client 175.101.12.13:57795] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.101.12.13 (+1 hits since last alert)|nypatriotcards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nypatriotcards.com"] [uri "/xmlrpc.php"] [unique_id "aktrOSusc6T4mRWWl6kK8QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-07-06 07:46:21
(19 hours ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 07:04:35
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 03:04:29.322075 2026] [security2:error] [pid 24902:tid 24902] [client 175.101.12.13:55257] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.101.12.13 (+1 hits since last alert)|bevensangi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bevensangi.com"] [uri "/xmlrpc.php"] [unique_id "aktTfYKRKiBQ086Oek69rgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-07-06 06:50:05
(19 hours ago)
Web App Attack
🇲🇾
Rizzy
2026-07-06 06:30:57
(20 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
Dave Hansen
2026-07-06 05:50:28
(20 hours ago)
(wordpress) Failed wordpress login from 175.101.12.13 (IN/India/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-07-06 04:56:44
(21 hours ago)
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 00:56:37.903866 2026] [security2:error] [pid 28160:tid 28160] [client 175.101.12.13:57942] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.101.12.13 (+1 hits since last alert)|camasmarket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "camasmarket.com"] [uri "/xmlrpc.php"] [unique_id "aks1hbhsHpgBEGN_riLKagAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-07-06 04:55:27
(21 hours ago)
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: ["/xmlrpc.php"] | UA: ["WordPress.com; ht ...
show more
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: ["/xmlrpc.php"] | UA: ["WordPress.com; https://wordpress.com","Jetpack by WordPress.com","Jetpack/12.1; WordPress/6.3; http://site88732073.com","Jetpack by WordPress.com (J
show less
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-07-06 04:52:15
(21 hours ago)
(xmlrpc) Failed xmlrpc access from 175.101.12.13 (IN/India/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
TPI-Abuse
2026-07-04 09:14:42
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 175.101.12.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 05:14:33.742765 2026] [security2:error] [pid 29825:tid 29825] [client 175.101.12.13:65441] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 175.101.12.13 (+1 hits since last alert)|healthmarkcounseling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "healthmarkcounseling.com"] [uri "/xmlrpc.php"] [unique_id "akjO-VKhWgPWHcY0SrnwkwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-07-04 08:36:45
(2 days ago)
6.815 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot