π¦πΊ
screwlooseit.com.au
2026-08-26 10:21:27
(5 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-08-23 05:12:40
(1 week ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-18 21:15:39
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 17:15:33.387506 2026] [security2:error] [pid 21243:tid 21243] [client 45.175.70.87:11797] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.175.70.87 (+1 hits since last alert)|rodzillacharters.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rodzillacharters.com"] [uri "/xmlrpc.php"] [unique_id "aoTLdfQXWGye70knK9bVMwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-08-14 14:21:02
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-08-13 05:07:19
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
Anonymous
2026-08-11 07:06:39
(2 weeks ago)
45.175.70.87 - - [11/Aug/2026:09:06:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by Wo ...
show more
45.175.70.87 - - [11/Aug/2026:09:06:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
45.175.70.87 - - [11/Aug/2026:09:06:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
45.175.70.87 - - [11/Aug/2026:09:06:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.0; WordPress/6.1; http://site28876721.com"
45.175.70.87 - - [11/Aug/2026:09:06:27 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack/12.0; WordPress/6.1; http://site28876721.com"
45.175.70.87 - - [11/Aug/2026:09:06:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com"
...
show less
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-08-09 17:33:36
(3 weeks ago)
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 09 13:33:29.223701 2026] [security2:error] [pid 712524:tid 712524] [client 45.175.70.87:46383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.175.70.87 (+1 hits since last alert)|margroberts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "margroberts.com"] [uri "/xmlrpc.php"] [unique_id "ani56W3rlBrVY_9GWrOurwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-08-08 07:34:16
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
Anonymous
2026-08-06 18:27:52
(3 weeks ago)
(wordpress) Failed wordpress login from 45.175.70.87 (DO/Dominican Republic/-)
Brute-Force
π¦πΊ
screwlooseit.com.au
2026-08-04 00:38:45
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
πͺπΈ
alferez
2026-08-02 03:05:24
(4 weeks ago)
xmlrpc.php attack DOS
Hacking
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-31 17:35:38
(4 weeks ago)
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 13:35:30.878717 2026] [security2:error] [pid 1115832:tid 1115832] [client 45.175.70.87:49154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.175.70.87 (+1 hits since last alert)|honigcpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "honigcpa.com"] [uri "/xmlrpc.php"] [unique_id "amzc4gueqVlSyJlJnxY_SwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-30 16:34:08
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 12:33:59.765644 2026] [security2:error] [pid 1310144:tid 1310144] [client 45.175.70.87:52618] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.175.70.87 (+1 hits since last alert)|bosdkbook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bosdkbook.com"] [uri "/xmlrpc.php"] [unique_id "amt893PDym_UeyNZtoYgXAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-07-29 17:39:11
(1 month ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
DO/Dominican Republic/-
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-28 18:39:09
(1 month ago)
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:240335) triggered by 45.175.70.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 14:38:59.263337 2026] [security2:error] [pid 1509808:tid 1509808] [client 45.175.70.87:50441] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 45.175.70.87 (+1 hits since last alert)|iostation.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iostation.com"] [uri "/xmlrpc.php"] [unique_id "amj3Q0AD21Xy-0BPu8UZawAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack