|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
FD-IX
|
|
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Reported by internal abuse tracking
|
DDoS Attack
Web App Attack
|
|
Anonymous
|
|
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
|
Brute-Force
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
202.4.169.93 - - [15/Sep/2026:13:30:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6384 "-" "Jetpack by WordPress.com"
202.4.169.93 - - [15/Sep/2026:13:30:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6384 "-" "WordPress.com; https://wordpress.com"
202.4.169. ...
show more
202.4.169.93 - - [15/Sep/2026:13:30:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6384 "-" "Jetpack by WordPress.com"
202.4.169.93 - - [15/Sep/2026:13:30:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6384 "-" "WordPress.com; https://wordpress.com"
202.4.169.93 - - [15/Sep/2026:13:31:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 6384 "-" "WordPress.com; https://wordpress.com"
show less
|
Hacking
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇦🇺
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
|
Web App Attack
|
|
🇦🇺
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:28:40.442487 2026] [security2:error] [pid 20818:tid 20818] [client 202.4.169.93:13430] Mod ...
show more
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:28:40.442487 2026] [security2:error] [pid 20818:tid 20818] [client 202.4.169.93:13430] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.4.169.93 (+1 hits since last alert)|kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kimbrothersduluth.com"] [uri "/xmlrpc.php"] [unique_id "aowq6Oq-ltm-pWrgIRVb9wAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
screwlooseit.com.au
|
|
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:10:25.787599 2026] [security2:error] [pid 1958280:tid 1958280] [client 202.4.169.93:62333] ...
show more
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:10:25.787599 2026] [security2:error] [pid 1958280:tid 1958280] [client 202.4.169.93:62333] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.4.169.93 (+1 hits since last alert)|cyqci.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "cyqci.eu"] [uri "/xmlrpc.php"] [unique_id "an_0wa3J7Td1VMl71jv1cwAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 06:13:27.243569 2026] [security2:error] [pid 31708:tid 31708] [client 202.4.169.93:1267] ModS ...
show more
(mod_security) mod_security (id:225170) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 06:13:27.243569 2026] [security2:error] [pid 31708:tid 31708] [client 202.4.169.93:1267] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barecreationsaz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barecreationsaz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anmkRzM-JSMULBa0QMTELwAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 07:15:15.857209 2026] [security2:error] [pid 528152:tid 528152] [client 202.4.169.93:50936] M ...
show more
(mod_security) mod_security (id:240335) triggered by 202.4.169.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 07:15:15.857209 2026] [security2:error] [pid 528152:tid 528152] [client 202.4.169.93:50936] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.4.169.93 (+1 hits since last alert)|williamfitzsimmons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "williamfitzsimmons.com"] [uri "/xmlrpc.php"] [unique_id "anW-QwukDg_oZ2l7AF_IEgAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
integrantservices.com
|
|
(wordpress) Failed wordpress login from 202.4.169.93 (IN/India/-)
|
Brute-Force
|