๐ซ๐ท
dynamix
2026-07-26 22:39:54
(6 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-26 19:37:54
(9 hours ago)
(mod_security) mod_security (id:240335) triggered by 49.36.45.37 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:240335) triggered by 49.36.45.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 15:37:41.284552 2026] [security2:error] [pid 3463915:tid 3463915] [client 49.36.45.37:55771] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.36.45.37 (+1 hits since last alert)|londongroup.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "londongroup.info"] [uri "/xmlrpc.php"] [unique_id "amZiBVits1os4C8hlX_e4gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-07-25 23:21:30
(1 day ago)
49.36.45.37 - - [26/Jul/2026:01:21:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack by Wo ...
show more
49.36.45.37 - - [26/Jul/2026:01:21:07 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack by WordPress.com" 49.36.45.37 - - [26/Jul/2026:01:21:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" 49.36.45.37 - - [26/Jul/2026:01:21:29 +0200] "POST /xmlrpc.php HTTP/1.1" 403 4841 "-" "Jetpack/12.1; WordPress/6.4; http://site61197260.com"
show less
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-07-25 14:27:26
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-07-23 17:33:19
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-07-23 17:33:13
(3 days ago)
[redacted] 49.36.45.37 - - [23/Jul/2026:19:32:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jet ...
show more
[redacted] 49.36.45.37 - - [23/Jul/2026:19:32:30 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.3; http://site28117611.com"
[redacted] 49.36.45.37 - - [23/Jul/2026:19:32:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.36.45.37 - - [23/Jul/2026:19:32:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 49.36.45.37 - - [23/Jul/2026:19:33:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.36.45.37 - - [23/Jul/2026:19:33:12 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.0; WordPress/6.1; http://site12143968.com"
...
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-07-23 05:44:57
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
Anonymous
2026-07-22 01:46:03
(5 days ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ซ๐ท
dwmp
2026-07-21 22:16:46
(5 days ago)
WordPress login Brute-Force
Brute-Force
Web App Attack
Anonymous
2026-07-21 19:19:56
(5 days ago)
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Wor ...
show more
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)"
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com"
[redacted] 49.36.45.37 - - [21/Jul/2026:21:19:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-20 11:43:56
(6 days ago)
cloudlinux2 fail2ban: 2026-07-20 13:39:41,879 fail2ban.filter [1927]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-20 13:39:41,879 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 49.36.45.37 - 2026-07-20 13:39:41cloudlinux2 fail2ban: 2026-07-20 13:40:02,715 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 49.36.45.37 - 2026-07-20 13:40:02cloudlinux2 fail2ban: 2026-07-20 13:40:03,065 fail2ban.actions [1927]: NOTICE [plesk-modsecurity] Ban 49.36.45.37cloudlinux2 fail2ban: 2026-07-20 13:40:03,071 fail2ban.filter [1927]: INFO [recidive] Found 49.36.45.37 - 2026-07-20 13:40:03cloudlinux2 fail2ban: 2026-07-20 13:41:01,220 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 125.209.123.66 - 2026-07-20 13:41:01cloudlinux2 fail2ban: 2026-07-20 13:41:35,242 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 223.188.43.208 - 2026-07-20 13:41:35cloudlinux2 fail2ban: 2026-07-20 13:42:14,699 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 125.209.123.66 - 2026-07-20 13:42:14cloudlinux2 fail2ban: 2026-07-20
show less
Brute-Force
๐ซ๐ท
dynamix
2026-07-20 10:05:34
(6 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-05-05 05:31:22
(2 months ago)
Unauthorized access to webpage admin
Web App Attack
๐ฒ๐พ
syokadmin
2021-12-03 05:25:56
(4 years ago)
Brute-Force
๐ฌ๐ง
UKFast Security
2021-04-20 00:49:48
(5 years ago)
WordPress XML RPC POST Brute Force Attack
Web App Attack