๐ง๐ช
voormedia
2026-10-04 12:03:50
(1 day ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
๐ฉ๐ช
LRob
2026-10-04 12:02:06
(1 day ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show more
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 | 2026-10-04 12:02 UTC
show less
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-10-04 11:00:10
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ช๐ธ
el-brujo
2026-10-04 09:58:52
(1 day ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Mozilla/5.0 ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallManaged ASN Description: PT Telekomunikasi Indonesia Country: ID Method: POST Timestamp: 2026-10-04T09:58:52Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-10-04 08:35:04
(1 day ago)
Attempted access to non existent wordpress urls
Bad Web Bot
๐ซ๐ท
Stylottica
2026-10-04 07:59:39
(1 day ago)
PrestaShop Security Module: WordPress probe path detected
Web App Attack
๐ช๐ธ
el-brujo
2026-10-04 07:56:34
(1 day ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 Action: managed_challenge Source: firewallManaged ASN Description: PT Telekomunikasi Indonesia Country: ID Method: POST Timestamp: 2026-10-04T07:56:34Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
el-brujo
2026-10-04 07:42:18
(1 day ago)
[Sun Oct 04 09:39:46.314426 2026] [proxy_fcgi:error] [pid 2025291:tid 2025306] [remote 36.82.93.188: ...
show more
[Sun Oct 04 09:39:46.314426 2026] [proxy_fcgi:error] [pid 2025291:tid 2025306] [remote 36.82.93.188:0] AH01071: Got error 'Primary script unknown\n', referer: http://foro.elhacker.net/wp-login.php
[Sun Oct 04 09:42:18.440545 2026] [proxy_fcgi:error] [pid 2026881:tid 2026903] [remote 36.82.93.188:0] AH01071: Got error 'Primary script unknown\n', referer: http://foro.elhacker.net/wp-login.php
...
show less
Hacking
Web App Attack
๐ต๐ฑ
gandaflux
2026-10-04 07:02:59
(1 day ago)
36.82.93.188 [redacted-domain] - [04/Oct/2026:09:02:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "- ...
show more
36.82.93.188 [redacted-domain] - [04/Oct/2026:09:02:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 [redacted-domain] - [04/Oct/2026:09:02:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 [redacted-domain] - [04/Oct/2026:09:02:49 +0200] "POST /xmlrpc.php HTTP/1.1" 403 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 [redacted-domain] - [04/Oct/2026:09:02:56 +0200] "POST /wp/xmlrpc.php HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0"
show less
Brute-Force
Web App Attack
๐ช๐ธ
el-brujo
2026-10-04 06:23:03
(1 day ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 Action: managed_challenge Source: firewallManaged ASN Description: PT Telekomunikasi Indonesia Country: ID Method: POST Timestamp: 2026-10-04T06:23:03Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
el-brujo
2026-10-04 06:11:03
(1 day ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0 Action: managed_challenge Source: firewallManaged ASN Description: PT Telekomunikasi Indonesia Country: ID Method: POST Timestamp: 2026-10-04T06:11:03Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ฌ๐ง
Bytemark
2026-10-04 05:55:31
(1 day ago)
36.82.93.188 - - [04/Oct/2026:06:55:27 +0100] "GET /xmlrpc.php HTTP/1.1" 301 6832 "http://distancele ...
show more
36.82.93.188 - - [04/Oct/2026:06:55:27 +0100] "GET /xmlrpc.php HTTP/1.1" 301 6832 "http://distancelearningcentre.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 - - [04/Oct/2026:06:55:28 +0100] "GET /xmlrpc.php HTTP/1.1" 404 6605 "https://distancelearningcentre.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 - - [04/Oct/2026:06:55:30 +0100] "GET /xmlrpc.php HTTP/1.1" 301 6832 "http://distancelearningcentre.com/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-10-04 05:22:37
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-04 05:22:21
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฌ๐ง
Bytemark
2026-10-04 03:32:41
(1 day ago)
36.82.93.188 - - [04/Oct/2026:04:32:20 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xm ...
show more
36.82.93.188 - - [04/Oct/2026:04:32:20 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
36.82.93.188 - - [04/Oct/2026:04:32:23 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
36.82.93.188 - - [04/Oct/2026:04:32:41 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack