🇫🇷
Kenshin869
2026-06-12 08:26:53
(1 week ago)
Wordpress unauthorized access attempt
Brute-Force
🇫🇷
masterguru
2026-06-12 07:33:11
(1 week ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇩🇪
rh24
2026-06-11 17:56:10
(1 week ago)
(wordpress) Failed wordpress login from 192.140.150.2 (PK/Pakistan/-): (CF_ENABLE)
Brute-Force
🇺🇸
WeekendWeb
2026-06-10 16:25:30
(1 week ago)
Wordpress Vunerability attack
Web App Attack
🇫🇷
dynamix
2026-06-10 12:50:09
(1 week ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
grassau.com
2026-06-10 06:29:27
(1 week ago)
(wordpress) Failed wordpress login from 192.140.150.2 (PK/Pakistan/Khyber Pakhtunkhwa/Peshawar/-)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-09 18:12:35
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 192.140.150.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.140.150.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:12:29.991305 2026] [security2:error] [pid 10933:tid 10933] [client 192.140.150.2:5556] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.140.150.2 (+1 hits since last alert)|avvmarchetticollini.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "avvmarchetticollini.it"] [uri "/xmlrpc.php"] [unique_id "aihXjXwOt8rMIzIR-r3SzgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2026-06-07 18:20:02
(1 week ago)
Excessive POST /xmlrpc.php requests
Brute-Force
Web App Attack
🇵🇾
SecOpsSL
2026-06-07 05:17:45
(2 weeks ago)
[Sun Jun 07 02:17:23.658183 2026] [authz_core:error] [pid 1480229:tid 1480229] [client 192.140.150.2 ...
show more
[Sun Jun 07 02:17:23.658183 2026] [authz_core:error] [pid 1480229:tid 1480229] [client 192.140.150.2:0] AH01630: client denied by server configuration: /var/www/html/wordpress/xmlrpc.php
[Sun Jun 07 02:17:34.154799 2026] [authz_core:error] [pid 1535566:tid 1535566] [client 192.140.150.2:0] AH01630: client denied by server configuration: /var/www/html/wordpress/xmlrpc.php
[Sun Jun 07 02:17:44.671195 2026] [authz_core:error] [pid 1480229:tid 1480229] [client 192.140.150.2:0] AH01630: client denied by server configuration: /var/www/html/wordpress/xmlrpc.php
show less
Brute-Force
Web App Attack
2026-06-07 03:10:16
(2 weeks ago)
[da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; sa ...
show more
[da.kdns.gr] httpd-xmlrpc-post: sites=anyfantis.gr; logs=/var/log/httpd/domains/anyfantis.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 19:44:40
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 192.140.150.2 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 192.140.150.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 15:44:31.677249 2026] [security2:error] [pid 6349:tid 6349] [client 192.140.150.2:5326] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 192.140.150.2 (+1 hits since last alert)|uccryakima.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "uccryakima.org"] [uri "/xmlrpc.php"] [unique_id "aiR4n_J9ApTYej5HBR-l-AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-05 11:28:35
(2 weeks ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
integrantservices.com
2026-06-05 11:27:53
(2 weeks ago)
(wordpress) Failed wordpress login from 192.140.150.2 (PK/Pakistan/-)
Brute-Force
2026-06-05 10:58:43
(2 weeks ago)
(wordpress) Failed wordpress login from 192.140.150.2 (PK/Pakistan/-)
Brute-Force
2026-06-04 14:13:11
(2 weeks ago)
[redacted] 192.140.150.2 - - [04/Jun/2026:16:12:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ...
show more
[redacted] 192.140.150.2 - - [04/Jun/2026:16:12:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 192.140.150.2 - - [04/Jun/2026:16:12:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 192.140.150.2 - - [04/Jun/2026:16:12:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 192.140.150.2 - - [04/Jun/2026:16:12:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)"
[redacted] 192.140.150.2 - - [04/Jun/2026:16:13:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site91342565.com"
...
show less
Hacking
Web App Attack