🇺🇸
TPI-Abuse
2025-12-17 14:34:43
(6 months ago)
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 09:34:35.401016 2025] [security2:error] [pid 26072:tid 26072] [client 192.0.100.233:56866] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.0.100.233 (+1 hits since last alert)|www.dixiegeek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.dixiegeek.com"] [uri "/xmlrpc.php"] [unique_id "aUK_eyOg6jKFFc-mr9MDjgAAAAk"], referer: https://www.dixiegeek.com/xmlrpc.php?for=jetpack&token=1q9Je5bEbzwhrQxb5lIM%2A4y%21EWgzQ3%24m%3A1%3A0×tamp=1765982075&nonce=PfEBIhrFuh&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=dF3%2FiIAyrPdB0HUtB%2BWD2S4oq%2Bc%3D
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-11-21 13:40:10
(6 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-09-07 19:06:19
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 07 15:06:14.208757 2024] [security2:error] [pid 16929:tid 16929] [client 192.0.100.233:32846] [client 192.0.100.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.0.100.233 (+1 hits since last alert)|www.adoniahenterprises.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.adoniahenterprises.com"] [uri "/xmlrpc.php"] [unique_id "ZtykJjApdyaskCCm6G-KVAAAAAQ"], referer: https://www.adoniahenterprises.com/xmlrpc.php?for=jetpack&token=jVAvIuNaG2qd%25MO9St9d%5EyMBX7%25ZnLjy%3A1%3A0×tamp=1725735974&nonce=8oNkbXn2nv&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=ZgcsHGX92aBH7aeqUho8439izkE%3D
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-03 12:18:26
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 08:18:20.529393 2024] [security2:error] [pid 31723:tid 31723] [client 192.0.100.233:6092] [client 192.0.100.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.0.100.233 (+1 hits since last alert)|www.dixiegeek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.dixiegeek.com"] [uri "/xmlrpc.php"] [unique_id "Ztb-jKDgvr_HhIiawubyBwAAAAk"], referer: https://www.dixiegeek.com/xmlrpc.php?for=jetpack&token=1q9Je5bEbzwhrQxb5lIM%2A4y%21EWgzQ3%24m%3A1%3A0×tamp=1725365900&nonce=zCJbwNPJop&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=cclmgXfInIViDhGY3qtDlyL5%2BOA%3D
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2024-05-19 22:00:22
(2 years ago)
POST /xmlrpc.php [19/May/2024:03:42:13
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-04-24 13:44:51
(2 years ago)
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.0.100.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 24 09:44:43.637200 2024] [security2:error] [pid 10606] [client 192.0.100.233:49686] [client 192.0.100.233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.0.100.233 (+1 hits since last alert)|www.dixiegeek.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.dixiegeek.com"] [uri "/xmlrpc.php"] [unique_id "ZikMy_z59QhPV3AZLyZZ4QAAABQ"], referer: https://www.dixiegeek.com/xmlrpc.php?for=jetpack&token=1q9Je5bEbzwhrQxb5lIM%2A4y%21EWgzQ3%24m%3A1%3A0×tamp=1713966283&nonce=1EWaDeCorG&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=ewqJoNVFxYaJTSG2cV5fu%2BY87sg%3D
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-04-23 00:31:13
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-04-19 03:02:42
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇰
wnbhosting.dk
2023-05-16 14:15:54
(3 years ago)
WP xmlrpc [2023-05-16T16:15:54+02:00]
Hacking
Web App Attack
🇪🇸
10dencehispahard SL
2023-03-21 08:24:56
(3 years ago)
Unauthorized login attempts [ wordpress-xmlrpc]
Brute-Force
Web App Attack
🇩🇰
wnbhosting.dk
2022-11-20 11:54:08
(3 years ago)
WP xmlrpc [2022-11-20T12:54:08+01:00]
Hacking
Web App Attack
🇨🇭
Nexgate Hosting
2022-08-01 11:37:03
(3 years ago)
POST /xmlrpc.php?for=jetpack&token=Uzs8j0uQBNMWGz%5EpIiwsYph%26lPT%25cCIu%3A1%3A0×tamp=16593597 ...
show more
POST /xmlrpc.php?for=jetpack&token=Uzs8j0uQBNMWGz%5EpIiwsYph%26lPT%25cCIu%3A1%3A0×tamp=1659359748&nonce=LQf2JyR4HQ&body-hash=beSe%2BMNllEEMcXMG%2BEvps8zgTpY%3D&signature=xKza0FLQwpSDJX7hCqHo%2FVevAek%3D
show less
Brute-Force
Web App Attack
🇩🇪
OiledAmoeba
2022-07-10 21:16:26
(3 years ago)
192.0.100.233 - - [11/Jul/2022:03:16:25 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&toke ...
show more
192.0.100.233 - - [11/Jul/2022:03:16:25 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657502184&nonce=uSPCH3A0UV&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=hMhEEKwYNaNQV%2FSatEKpkx2E5RE%3D HTTP/1.1" 500 0 "https://www.ruhnke.cloud/xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657502184&nonce=uSPCH3A0UV&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=hMhEEKwYNaNQV%2FSatEKpkx2E5RE%3D" "Jetpack by WordPress.com" "-" 0.424 "-"
...
show less
Brute-Force
🇩🇪
OiledAmoeba
2022-07-10 17:16:03
(3 years ago)
192.0.100.233 - - [10/Jul/2022:23:16:03 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&toke ...
show more
192.0.100.233 - - [10/Jul/2022:23:16:03 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657487762&nonce=KTHkA15fHY&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=QGoRGoIlJ%2FBcZ1V2N2UX34TuF9A%3D HTTP/1.1" 500 0 "https://www.ruhnke.cloud/xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657487762&nonce=KTHkA15fHY&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=QGoRGoIlJ%2FBcZ1V2N2UX34TuF9A%3D" "Jetpack by WordPress.com" "-" 0.460 "-"
...
show less
Brute-Force
🇩🇪
OiledAmoeba
2022-07-10 15:06:54
(3 years ago)
192.0.100.233 - - [10/Jul/2022:21:06:53 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&toke ...
show more
192.0.100.233 - - [10/Jul/2022:21:06:53 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657480012&nonce=Rzd4SIo700&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=I0WoFDn7Nz4zXn5wa7rvAztUBps%3D HTTP/1.1" 500 0 "https://www.ruhnke.cloud/xmlrpc.php?for=jetpack&token=yI%23s%25wmqLKwF%21%251wV%2Awt2sUbDMmapK%288%3A1%3A1×tamp=1657480012&nonce=Rzd4SIo700&body-hash=zM6wtlIR3F15tOMR6hYdh1YDU3A%3D&signature=I0WoFDn7Nz4zXn5wa7rvAztUBps%3D" "Jetpack by WordPress.com" "-" 0.439 "-"
...
show less
Brute-Force