Anonymous
2026-10-28 19:09:33
(4 hours ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.popikouloufakou.com; logs=/var/log/httpd/domains/popikouloufakou.com.log; samples=/xmlrpc.php
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-28 03:48:13
(19 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 72>=65, Abuse 75, NonEU, first-seen, Change* path)
Hacking
Exploited Host
Web App Attack
๐ฉ๐ช
netclix.gr
2026-10-26 09:09:15
(2 days ago)
(wordpress) Failed wordpress login from 197.248.192.113 (KE/Kenya/197-248-192-113.safaricombusiness.co.ke)
Brute-Force
๐บ๐ธ
kosada.com
2026-10-25 20:48:05
(3 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=34&topics%5B5%5D=49&topics%5B6%5D=64&topics%5B7%5D=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/6 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B4%5D=34&topics%5B5%5D=49&topics%5B6%5D=64&topics%5B7%5D=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15")
show less
DDoS Attack
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-24 05:33:10
(4 days ago)
Suspicious multiple login attempts
Brute-Force
Web App Attack
Anonymous
2026-10-24 00:05:22
(4 days ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
Anonymous
2026-10-22 00:36:39
(6 days ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
๐ง๐ท
ICS Labs
2026-10-21 14:40:32
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-21 UTC.
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-10-20 18:20:53
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-20 18:09:04
(1 week ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 11:33:35
(1 week ago)
[redacted] 197.248.192.113 - - [20/Oct/2026:13:32:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.1; WordPress/6.3; http://site75237345.com"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:32:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 41 ...
show more
[redacted] 197.248.192.113 - - [20/Oct/2026:13:32:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.1; WordPress/6.3; http://site75237345.com"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:32:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.3; http://site48066496.com"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:32:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.5; WordPress/6.3; http://site46239687.com"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:33:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack/12.0; WordPress/6.4; http://site50933192.com"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:33:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:33:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
[redacted] 197.248.192.113 - - [20/Oct/2026:13:33:13 +0200] "POST /
...
show less
Hacking
Web App Attack
๐ซ๐ฎ
YF
2026-10-19 16:00:43
(1 week ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐จ๐ญ
Mario Bretscher
2026-10-17 11:43:30
(1 week ago)
Oct 17 13:43:18 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3245126]: Authentication failure for admin from 197.248.192.113
Oct 17 13:43:29 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3245127]: Authentication failure for admin from 197.248.19 ...
show more
Oct 17 13:43:18 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3245126]: Authentication failure for admin from 197.248.192.113
Oct 17 13:43:29 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3245127]: Authentication failure for admin from 197.248.192.113
...
show less
Web Spam
๐บ๐ธ
IndigoRidge
2026-10-17 11:16:13
(1 week ago)
197.248.192.113 - - [17/Oct/2026:07:12:59 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5412 "-" "WordPress.com; https://wordpress.com"
197.248.192.113 - - [17/Oct/2026:07:13:20 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5411 "-" "WordPress.com; https://wordpre ...
show more
197.248.192.113 - - [17/Oct/2026:07:12:59 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5412 "-" "WordPress.com; https://wordpress.com"
197.248.192.113 - - [17/Oct/2026:07:13:20 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5411 "-" "WordPress.com; https://wordpress.com"
197.248.192.113 - - [17/Oct/2026:07:14:47 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5412 "-" "WordPress.com; https://wordpress.com"
197.248.192.113 - - [17/Oct/2026:07:15:40 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5411 "-" "WordPress.com; https://wordpress.com"
197.248.192.113 - - [17/Oct/2026:07:16:12 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5412 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
Anonymous
2026-10-17 05:21:13
(1 week ago)
[redacted] 197.248.192.113 - - [17/Oct/2026:07:20:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 197.248.192.113 - - [17/Oct/2026:07:20:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack b ...
show more
[redacted] 197.248.192.113 - - [17/Oct/2026:07:20:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 197.248.192.113 - - [17/Oct/2026:07:20:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 197.248.192.113 - - [17/Oct/2026:07:20:51 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site71001880.com"
[redacted] 197.248.192.113 - - [17/Oct/2026:07:21:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 197.248.192.113 - - [17/Oct/2026:07:21:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
...
show less
Hacking
Web App Attack