🇪🇸
masterguru
2026-08-01 04:26:00
(1 month ago)
(xmlrpc) Failed xmlrpc access from 49.36.233.99 (IN/India/-): 5 in the last 3600 secs (0-122)
Hacking
🇲🇾
Rizzy
2026-08-01 02:43:02
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
kosada.com
2026-07-18 17:59:01
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
Anonymous
2026-06-13 07:14:16
(2 months ago)
[redacted] 49.36.233.99 - - [13/Jun/2026:09:13:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ...
show more
[redacted] 49.36.233.99 - - [13/Jun/2026:09:13:35 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.3; http://site96164247.com"
[redacted] 49.36.233.99 - - [13/Jun/2026:09:13:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 49.36.233.99 - - [13/Jun/2026:09:13:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
[redacted] 49.36.233.99 - - [13/Jun/2026:09:14:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 49.36.233.99 - - [13/Jun/2026:09:14:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4)"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 03:02:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 49.36.233.99 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 49.36.233.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 23:01:59.609926 2026] [security2:error] [pid 10301:tid 10301] [client 49.36.233.99:64261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kimbrothersduluth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kimbrothersduluth.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agaMpx7O7HRIH6IR2ojDiAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-04-17 11:34:47
(4 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack
Anonymous
2026-04-17 10:18:10
(4 months ago)
49.36.233.99 - - [17/Apr/2026:12:17:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by Wo ...
show more
49.36.233.99 - - [17/Apr/2026:12:17:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com"
49.36.233.99 - - [17/Apr/2026:12:17:48 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com"
49.36.233.99 - - [17/Apr/2026:12:17:57 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com"
49.36.233.99 - - [17/Apr/2026:12:17:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com"
49.36.233.99 - - [17/Apr/2026:12:18:08 +0200] "POST /xmlrpc.php HTTP/1.0" 200 593 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-04-17 09:42:04
(4 months ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇳🇱
wlt-blocker
2026-04-10 08:22:50
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇨🇿
huginet
2026-04-04 10:18:41
(5 months ago)
49.36.233.99 - - [04/Apr/2026:12:16:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 ( ...
show more
49.36.233.99 - - [04/Apr/2026:12:16:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36"
49.36.233.99 - - [04/Apr/2026:12:18:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36"
...
show less
Web Spam
Blog Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Jason Howell
2026-04-04 07:44:34
(5 months ago)
49.36.233.99 - - [04/Apr/2026:01:57:18 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2989 "-" "Mozilla/5.0 ...
show more
49.36.233.99 - - [04/Apr/2026:01:57:18 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2989 "-" "Mozilla/5.0 (Windows NT 10.0; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/65.0.0.0 Safari/537.36"
49.36.233.99 - - [04/Apr/2026:02:34:59 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/78.0.0.0 Safari/537.36"
49.36.233.99 - - [04/Apr/2026:02:41:51 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2988 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/80.0.0.0 Safari/537.36"
49.36.233.99 - - [04/Apr/2026:02:43:24 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2989 "-" "Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/79.0.0.0 Safari/537.36"
49.36.233.99 - - [04/Apr/2026:02:44:33 -0500] "POST /xmlrpc.php HTTP/1.1" 200 2989 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇫🇷
Sklurk
2026-03-31 11:34:41
(5 months ago)
Web App Attack
Web App Attack
🇺🇸
kosada.com
2026-03-02 16:45:50
(6 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
KPS
2026-01-16 17:12:19
(7 months ago)
PortscanM
Port Scan
🇳🇱
exxos
2025-07-30 02:08:25
(1 year ago)
http-no-verb
Hacking