๐ณ๐ฑ
tmiland
2026-08-21 13:48:25
(4 days ago)
(wordpress_xmlrpc) WordPress XMLPRC Attack 36.69.153.24 (ID/Indonesia/-): 3 in the last 3600 secs; I ...
show more
(wordpress_xmlrpc) WordPress XMLPRC Attack 36.69.153.24 (ID/Indonesia/-): 3 in the last 3600 secs; IP: 36.69.153.24; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 36.69.153.24 - - [21/Aug/2026:15:47:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com" 36.69.153.24 - - [21/Aug/2026:15:48:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" 36.69.153.24 - - [21/Aug/2026:15:48:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/12.5; WordPress/6.1; http://site35952139.com"
show less
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-08-21 10:50:47
(4 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-21 10:43:40
(4 days ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-08-21 10:33:29
(4 days ago)
Web App Attack
Anonymous
2026-08-21 08:10:05
(4 days ago)
[redacted] 36.69.153.24 - - [21/Aug/2026:10:09:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 36.69.153.24 - - [21/Aug/2026:10:09:22 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site25554876.com"
[redacted] 36.69.153.24 - - [21/Aug/2026:10:09:33 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site82850746.com"
[redacted] 36.69.153.24 - - [21/Aug/2026:10:09:43 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site78619788.com"
[redacted] 36.69.153.24 - - [21/Aug/2026:10:09:54 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 36.69.153.24 - - [21/Aug/2026:10:10:04 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.1; http://site19876990.com"
...
show less
Hacking
Web App Attack
๐บ๐ธ
Lee Daniel
2026-08-21 06:29:01
(5 days ago)
[21/Aug/2026:02:28:18.853805 --0400] aofwAi9kp-j9blUBnHmiXAAAAIo 36.69.153.24 35696 127.0.0.1 7081
[ ...
show more
[21/Aug/2026:02:28:18.853805 --0400] aofwAi9kp-j9blUBnHmiXAAAAIo 36.69.153.24 35696 127.0.0.1 7081
[21/Aug/2026:02:28:29.393547 --0400] aofwDS9kp-j9blUBnHmilAAAAIY 36.69.153.24 46910 127.0.0.1 7081
[21/Aug/2026:02:28:39.920120 --0400] aofwF7LiQBjXe-yeid-gUgAAAQ0 36.69.153.24 40720 127.0.0.1 7081
[21/Aug/2026:02:28:50.458520 --0400] aofwIqB4myUhjUoCYRNddQAAAVE 36.69.153.24 58216 127.0.0.1 7081
[21/Aug/2026:02:29:00.991780 --0400] aofwLKB4myUhjUoCYRNdyAAAAU0 36.69.153.24 36170 127.0.0.1 7081
...
show less
DDoS Attack
Brute-Force
Anonymous
2026-08-21 01:33:02
(5 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-21 01:18:55
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-08-20 06:42:37
(6 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-08-19 05:30:38
(1 week ago)
36.69.153.24 - [19/Aug/2026:08:30:31 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; ...
show more
36.69.153.24 - [19/Aug/2026:08:30:31 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; https://wordpress.com" "-"
36.69.153.24 - [19/Aug/2026:08:30:37 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "WordPress.com; https://wordpress.com" "-"
...
show less
Hacking
Brute-Force
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-08-19 05:15:28
(1 week ago)
36.69.153.24 - [19/Aug/2026:08:15:18 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by Word ...
show more
36.69.153.24 - [19/Aug/2026:08:15:18 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack by WordPress.com" "-"
36.69.153.24 - [19/Aug/2026:08:15:27 +0300] "POST /xmlrpc.php HTTP/1.1" 403 428 "-" "Jetpack/13.0; WordPress/6.2; http://site57113858.com" "-"
...
show less
Hacking
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-19 01:09:47
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-08-18 03:26:42
(1 week ago)
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.1; http://site85595869.com"
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)"
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.2)"
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 36.69.153.24 - - [18/Aug/2026:05:26:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.4; http://site55591694.com"
...
show less
Hacking
Web App Attack
๐จ๐ญ
4server
2026-08-17 12:45:45
(1 week ago)
[MonAug1714:45:35.4462452026][security2:error][pid3445134:tid3445740][client36.69.153.24:0]ModSecuri ...
show more
[MonAug1714:45:35.4462452026][security2:error][pid3445134:tid3445740][client36.69.153.24:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"468\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"hosting-ticino-svizzera.ch\"][uri\"/xmlrpc.php\"][unique_id\"aoMCb1vKPCt7DYZe35or3AAAAIc\"]
show less
Hacking
Web App Attack