🇺🇸
WeekendWeb
2025-10-06 13:18:36
(7 months ago)
Wordpress Vunerability attack
Web App Attack
🇳🇱
applemooz
2025-10-06 06:55:40
(7 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇩🇪
Marc
2025-10-05 06:35:30
(8 months ago)
Brute-Force
2025-10-04 04:11:30
(8 months ago)
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "M ...
show more
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:15 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (iPad; CPU OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/5.5.50480 Mobile/12F69 Safari/600.1.4"
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (iPad; U; CPU OS 5_1_1 like Mac OS X; en-us) AppleWebKit/534.46.0 (KHTML, like Gecko) CriOS/19.0.1084.60 Mobile/9B206 Safari/7534.48.3"
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-us) AppleWebKit/312.8 (KHTML, like Gecko) Safari/312.6"
[redacted] 45.202.79.165 - - [04/Oct/2025:06:11:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/
...
show less
Hacking
Web App Attack
2025-09-28 23:59:46
(8 months ago)
WordPress Brute Force
Brute-Force
🇩🇪
DEV-DNS
2025-09-28 10:44:25
(8 months ago)
(wordpress) Failed wordpress login from 45.202.79.165 (IT/Italy/-/-/-/[redacted])
Brute-Force
🇺🇸
ph
2025-09-21 16:38:59
(8 months ago)
Bad web bot attempting to run wp-json on non-WP site
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Rip
2025-09-13 05:58:21
(8 months ago)
Apache Authentication attack. CMS Brute Force - Access Forbidden
Brute-Force
Web App Attack
🇩🇪
bsoft.de
2025-09-08 01:25:27
(8 months ago)
45.202.79.165 - - [08/Sep/2025:03:21:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 ...
show more
45.202.79.165 - - [08/Sep/2025:03:21:45 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/601.7.7 (KHTML, like Gecko) Version/9.1.2 Safari/601.7.7"
45.202.79.165 - - [08/Sep/2025:03:24:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MSIECrawler)"
45.202.79.165 - - [08/Sep/2025:03:25:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (iPad; CPU OS 10_3_3 like Mac OS X) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.0 Mobile/14G60 Safari/602.1"
show less
Web App Attack
🇦🇺
weblite
2025-09-02 05:30:13
(9 months ago)
WP_XMLRPC_ABUSE
Brute-Force
Web App Attack
🇩🇪
Ba-Yu
2025-08-25 04:40:50
(9 months ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇩🇪
Hary74656
2025-08-24 14:26:59
(9 months ago)
[Sun Aug 24 16:26:57.442258 2025] [authz_core:error] [pid 428781:tid 428839] [client 45.202.79.165:1 ...
show more
[Sun Aug 24 16:26:57.442258 2025] [authz_core:error] [pid 428781:tid 428839] [client 45.202.79.165:12857] AH01630: client denied by server configuration: /home/harald/www/aschi.at/xmlrpc.php
...
show less
Bad Web Bot
🇩🇪
Packets-Decreaser.NET
2025-05-04 16:05:01
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-04-09 02:34:24
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.202.79.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.202.79.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 22:34:18.286533 2025] [security2:error] [pid 2519892:tid 2519892] [client 45.202.79.165:37599] [client 45.202.79.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||franzexpress.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "franzexpress.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_XcqmzKQNT4Lid22jwvAwAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 16:13:05
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 45.202.79.165 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.202.79.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 12:12:59.283275 2025] [security2:error] [pid 16455:tid 16455] [client 45.202.79.165:9943] [client 45.202.79.165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||affordablehomegoods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "affordablehomegoods.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_VLC8urDZ1JpfYd2eWrWAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack