๐ฒ๐พ
Rizzy
2026-06-11 08:21:00
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-06-11 05:43:57
(2 days ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=popikouloufakou.com; logs=/var/log/httpd/domains/popikoulouf ...
show more
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=popikouloufakou.com; logs=/var/log/httpd/domains/popikouloufakou.com.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-06-11 03:29:05
(2 days ago)
Unauthorized access to webpage admin
Web App Attack
Anonymous
2026-06-10 09:38:14
(3 days ago)
[redacted] 203.83.45.30 - - [10/Jun/2026:11:37:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 203.83.45.30 - - [10/Jun/2026:11:37:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.4; http://site65600452.com"
[redacted] 203.83.45.30 - - [10/Jun/2026:11:37:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 203.83.45.30 - - [10/Jun/2026:11:37:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 203.83.45.30 - - [10/Jun/2026:11:38:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 203.83.45.30 - - [10/Jun/2026:11:38:13 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-10 08:07:28
(3 days ago)
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:07:19.267823 2026] [security2:error] [pid 25791:tid 25791] [client 203.83.45.30:23686] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 203.83.45.30 (+1 hits since last alert)|weird.eco|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "weird.eco"] [uri "/xmlrpc.php"] [unique_id "aikbNyuduxGx6A3R5EuDsAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-10 05:27:54
(3 days ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
Anonymous
2026-06-10 05:27:42
(3 days ago)
[redacted] 203.83.45.30 - - [10/Jun/2026:07:26:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 203.83.45.30 - - [10/Jun/2026:07:26:58 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)"
[redacted] 203.83.45.30 - - [10/Jun/2026:07:27:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 203.83.45.30 - - [10/Jun/2026:07:27:19 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.2; http://site14983419.com"
[redacted] 203.83.45.30 - - [10/Jun/2026:07:27:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 203.83.45.30 - - [10/Jun/2026:07:27:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
...
show less
Hacking
Web App Attack
Anonymous
2026-06-10 04:26:17
(3 days ago)
203.83.45.30 - - [10/Jun/2026:06:25:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com ...
show more
203.83.45.30 - - [10/Jun/2026:06:25:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "WordPress.com; https://wordpress.com"
203.83.45.30 - - [10/Jun/2026:06:25:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
203.83.45.30 - - [10/Jun/2026:06:25:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com"
203.83.45.30 - - [10/Jun/2026:06:26:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack/12.5; WordPress/6.2; http://site34817105.com"
203.83.45.30 - - [10/Jun/2026:06:26:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 767 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
bigwavedave
2026-06-10 02:34:27
(4 days ago)
Wordpress Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 08:56:13
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:56:07.303752 2026] [security2:error] [pid 20372:tid 20372] [client 203.83.45.30:43734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 203.83.45.30 (+1 hits since last alert)|roguetechscene.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechscene.com"] [uri "/xmlrpc.php"] [unique_id "aiaDp9WXA8Al_8s-DIohywAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 06:22:19
(5 days ago)
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 203.83.45.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:22:11.943728 2026] [security2:error] [pid 5971:tid 5971] [client 203.83.45.30:15921] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 203.83.45.30 (+1 hits since last alert)|ucommsi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ucommsi.com"] [uri "/xmlrpc.php"] [unique_id "aiZfk4tuMJf24xJXRw78vgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-08 02:35:42
(6 days ago)
[redacted] 203.83.45.30 - - [08/Jun/2026:04:34:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Je ...
show more
[redacted] 203.83.45.30 - - [08/Jun/2026:04:34:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.2; http://site59969441.com"
[redacted] 203.83.45.30 - - [08/Jun/2026:04:35:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 203.83.45.30 - - [08/Jun/2026:04:35:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
[redacted] 203.83.45.30 - - [08/Jun/2026:04:35:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 203.83.45.30 - - [08/Jun/2026:04:35:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
...
show less
Hacking
Web App Attack
๐ฑ๐ป
garmtech.com
2026-06-08 01:16:22
(6 days ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
๐ซ๐ท
masterguru
2026-06-01 10:58:24
(1 week ago)
Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot|bingbot|googlebot|yandexbot|duckduckbot ...
show more
Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot|bingbot|googlebot|yandexbot|duckduckbot)" against "REQUEST_HEADERS:User-Agent" required. (780532-133)
show less
Hacking
๐ซ๐ฎ
YF
2026-05-26 11:03:24
(2 weeks ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force