🇩🇪
big-cloud.nl
2026-03-11 18:09:18
(7 months ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
LRob
2026-03-11 16:30:18
(7 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇮🇹
mgarofano80
2026-03-07 16:10:22
(7 months ago)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-03-07 04:01:15
(7 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-07 03:32:21
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇳🇱
jjnxpct
2026-03-06 04:51:43
(7 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /xmlrpc.php (Rule ID: 920340) - Content-Type header missing from request with non-zero Content-Length
show less
Web App Attack
🇺🇸
myagent.site
2025-09-27 05:24:38
(1 year ago)
Blocking for trying to access an exploit file: /auth/sso/xmlrpc.php
Hacking
🇺🇸
TPI-Abuse
2025-07-04 04:35:54
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 04 00:35:49.809855 2025] [security2:error] [pid 16440:tid 16440] [client 2001:41d0:306:1f82::1:54728] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.spacebooger.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.spacebooger.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGdaJU08OgrOxr5dwlnAigAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-04 01:34:59
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 03 21:34:51.471652 2025] [security2:error] [pid 26889:tid 26889] [client 2001:41d0:306:1f82::1:47542] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.concentricsteel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.concentricsteel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGcvuyq4rTz9-2rM6WegLgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 04:38:27
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 00:38:23.113759 2025] [security2:error] [pid 15952:tid 15963] [client 2001:41d0:306:1f82::1:37400] [client 2001:41d0:306:1f82::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gmentz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gmentz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-9iP3nZejUYmdBKs8C9QQAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 04:03:08
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:225170) triggered by 2001:41d0:306:1f82::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 00:03:01.406467 2025] [security2:error] [pid 19112:tid 19112] [client 2001:41d0:306:1f82::1:43388] [client 2001:41d0:306:1f82::1] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||snowrideadventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "snowrideadventures.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z-9Z9cSeGDL5bn5co86iMAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
lpar69
2025-04-02 06:39:00
(1 year ago)
/wp-login.php
Hacking
Web App Attack
