websase.com
2022-07-27 17:27:51
(2 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
Anonymous
2022-07-26 14:07:07
(2 years ago)
(mod_security) mod_security (id:972687) triggered by 213.152.186.35 (NL/Netherlands/-): 2 in the las ... show more (mod_security) mod_security (id:972687) triggered by 213.152.186.35 (NL/Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Jul 26 15:05:21.413790 2022] [:error] [pid 1974513] [client 213.152.186.35:60870] [client 213.152.186.35] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "centergreen.com.br"] [uri "/xmlrpc.php"] [unique_id "YuAs4ePOf31bQC_FrMj7wwAAAB8"]
[Tue Jul 26 15:07:00.937179 2022] [:error] [pid 1975440] [client 213.152.186.35:48184] [client 213.152.186.35] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "omegamkt.com.br"] [uri "/xmlrpc.php"] [unique_id "YuAtRNqQwBYyKbrPYhk1CgAAADI"] show less
Port Scan
akac
2022-07-25 20:21:39
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>password@123</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
websase.com
2022-07-25 13:48:04
(2 years ago)
WordPress XMLRPC Brute Force Attacks
Brute-Force
Web App Attack
akac
2022-07-25 01:20:30
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>adminadmin2019</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2022-07-22 06:00:12
(2 years ago)
UDP/39270 probe
Port Scan
Anonymous
2022-07-22 03:45:05
(2 years ago)
UDP/46532 probe
Port Scan
akac
2022-07-19 21:08:03
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>aDmIn123</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
akac
2022-07-18 23:12:03
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>AdmiN1234</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
akac
2022-07-18 22:52:49
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>administrador</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
akac
2022-07-18 00:55:49
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>Admin08</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
Samuel K
2022-07-17 23:00:07
(2 years ago)
Web scan/attack
Port Scan
Web App Attack
applemooz
2022-07-16 19:21:23
(2 years ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
akac
2022-07-14 23:49:01
(2 years ago)
WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Win ... show more WordPress XML-RPC attack attempt.
Request: POST /xmlrpc.php
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Body: <methodCall>
<methodName>wp.getUsersBlogs</methodName>
<params>
<param><value>admin</value></param>
<param><value>internet</value></param>
</params>
</methodCall> show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
wnbhosting.dk
2022-07-12 16:41:46
(2 years ago)
WP xmlrpc [2022-07-12T18:41:46+02:00]
Hacking
Web App Attack