๐ซ๐ท
dynamix
2026-08-26 17:11:44
(5 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-08-26 15:06:45
(7 hours ago)
183.83.152.248 - - [26/Aug/2026:11:04:48 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress. ...
show more
183.83.152.248 - - [26/Aug/2026:11:04:48 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [26/Aug/2026:11:05:30 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [26/Aug/2026:11:06:02 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [26/Aug/2026:11:06:34 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [26/Aug/2026:11:06:45 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5489 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ณ๐ฑ
debestelapp
2026-08-26 11:25:07
(10 hours ago)
Web App Attack
๐ง๐ช
madeit
2026-08-25 10:08:16
(1 day ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 04:46:41
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 183.83.152.248 (183.83.152.248.actcorp.in): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.152.248 (183.83.152.248.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 00:46:32.469366 2026] [security2:error] [pid 7960:tid 7960] [client 183.83.152.248:14574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.152.248 (+1 hits since last alert)|36sovereignchambers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "36sovereignchambers.com"] [uri "/xmlrpc.php"] [unique_id "ao0eKC8CRhcA02ccULh-ygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 18:38:29
(2 days ago)
(mod_security) mod_security (id:240335) triggered by 183.83.152.248 (183.83.152.248.actcorp.in): 1 i ...
show more
(mod_security) mod_security (id:240335) triggered by 183.83.152.248 (183.83.152.248.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 14:38:25.534931 2026] [security2:error] [pid 29678:tid 29678] [client 183.83.152.248:13691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 183.83.152.248 (+1 hits since last alert)|mkdesignndetailing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mkdesignndetailing.com"] [uri "/xmlrpc.php"] [unique_id "aoyPoasWJcAso8OkFw-wowAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-08-24 08:40:10
(2 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: POST | path: /xmlrpc.php | 2026-08-24 08:40 UTC
show less
Hacking
Web App Attack
Anonymous
2026-08-24 07:06:03
(2 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-08-23 16:51:30
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-08-23 16:15:17
(3 days ago)
183.83.152.248 - - [23/Aug/2026:12:14:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5070 "-" "WordPress. ...
show more
183.83.152.248 - - [23/Aug/2026:12:14:13 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5070 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [23/Aug/2026:12:14:34 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5070 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [23/Aug/2026:12:14:55 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5038 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [23/Aug/2026:12:15:06 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5038 "-" "WordPress.com; https://wordpress.com"
183.83.152.248 - - [23/Aug/2026:12:15:16 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5038 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-23 10:48:29
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-08-23 05:42:37
(3 days ago)
[redacted] 183.83.152.248 - - [23/Aug/2026:07:41:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" " ...
show more
[redacted] 183.83.152.248 - - [23/Aug/2026:07:41:53 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 183.83.152.248 - - [23/Aug/2026:07:42:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.2; http://site66551750.com"
[redacted] 183.83.152.248 - - [23/Aug/2026:07:42:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
[redacted] 183.83.152.248 - - [23/Aug/2026:07:42:25 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 183.83.152.248 - - [23/Aug/2026:07:42:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
๐ง๐ท
hostseries
2025-11-25 17:34:14
(9 months ago)
Trigger: LF_DISTATTACK
Brute-Force