๐บ๐ธ
TPI-Abuse
2026-07-22 17:09:48
(15 hours ago)
(mod_security) mod_security (id:240335) triggered by 49.204.29.15 (broadband.actcorp.in): 1 in the l ...
show more
(mod_security) mod_security (id:240335) triggered by 49.204.29.15 (broadband.actcorp.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:09:43.620560 2026] [security2:error] [pid 1162926:tid 1162926] [client 49.204.29.15:16452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.204.29.15 (+1 hits since last alert)|kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kimbrothersduluth.com"] [uri "/xmlrpc.php"] [unique_id "amD5V3oXKohFmR-Vden2vQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-07-21 22:41:58
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-21 20:08:57
(1 day ago)
cloudlinux2 fail2ban: 2026-07-21 22:04:18,468 fail2ban.filter [1927]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-21 22:04:18,468 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 45.132.227.115 - 2026-07-21 22:04:17cloudlinux2 fail2ban: 2026-07-21 22:04:27,370 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 176.9.178.245 - 2026-07-21 22:04:27cloudlinux2 fail2ban: 2026-07-21 22:04:46,480 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 49.36.111.232 - 2026-07-21 22:04:46cloudlinux2 fail2ban: 2026-07-21 22:04:58,794 fail2ban.filter [1927]: INFO [plesk-apache] Found 52.167.0.228 - 2026-07-21 22:04:58cloudlinux2 fail2ban: 2026-07-21 22:05:36,538 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 49.204.29.15 - 2026-07-21 22:05:36cloudlinux2 fail2ban: 2026-07-21 22:05:45,662 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 20.97.227.207 - 2026-07-21 22:05:45cloudlinux2 fail2ban: 2026-07-21 22:06:21,408 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 173.239.211.251 - 2026-07-21 22:06:21clo
show less
Web App Attack
๐บ๐ธ
IndigoRidge
2026-07-21 16:43:02
(1 day ago)
49.204.29.15 - - [21/Jul/2026:12:40:53 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.co ...
show more
49.204.29.15 - - [21/Jul/2026:12:40:53 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
49.204.29.15 - - [21/Jul/2026:12:41:36 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
49.204.29.15 - - [21/Jul/2026:12:42:40 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
49.204.29.15 - - [21/Jul/2026:12:42:50 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
49.204.29.15 - - [21/Jul/2026:12:43:01 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5072 "-" "WordPress.com; https://wordpress.com"
...
show less
Web App Attack
๐ฉ๐ช
Marc
2026-07-20 18:44:49
(2 days ago)
49.204.29.15 - - [20/Jul/2026:20:44:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5092 "-" "Jetpack/13.0 ...
show more
49.204.29.15 - - [20/Jul/2026:20:44:26 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5092 "-" "Jetpack/13.0; WordPress/6.4; http://site98362572.com" 49.204.29.15 - - [20/Jul/2026:20:44:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5091 "-" "Jetpack by WordPress.com" 49.204.29.15 - - [20/Jul/2026:20:44:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5091 "-" "Jetpack by WordPress.com"
show less
Brute-Force
Web App Attack
Anonymous
2026-07-17 19:10:06
(5 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-07-17 17:36:32
(5 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-07-17 16:35:12
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-07-16 14:08:18
(6 days ago)
CrowdSec: lrob/wp-xmlrpc-bf | req: /xmlrpc.php | UA: WordPress.com; https://wordpress.com
Brute-Force
Web App Attack
๐ฉ๐ช
rh24
2026-07-14 20:01:17
(1 week ago)
(xmlrpc_405) XMLRPC-Bot 405 49.204.29.15 (IN/India/broadband.actcorp.in)
Hacking
Anonymous
2024-07-21 05:38:31
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH