|
🇩🇪
LRob
|
|
WordPress login brute force | path: /xmlrpc.php | ua: WordPress.com; https://wordpress.com, Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2), Jetpack/12.1; WordPress/6.3; http://site14092503.com
|
Brute-Force
Web App Attack
|
|
🇳🇱
middelkoopcc
|
|
2026-09-28 18:46:31 WordPress login error from 82.78.85.71: incorrect_password && 2026-09-28 18:46:41 WordPress login error from 82.78.85.71: incorrect_password && 2026-09-28 18:46:52 WordPress login error from 82.78.85.71: incorrect_password && 16 m ...
show more
2026-09-28 18:46:31 WordPress login error from 82.78.85.71: incorrect_password && 2026-09-28 18:46:41 WordPress login error from 82.78.85.71: incorrect_password && 2026-09-28 18:46:52 WordPress login error from 82.78.85.71: incorrect_password && 16 more within 20 minutes
show less
|
Brute-Force
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
FD-IX
|
|
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
grassau.com
|
|
(wordpress) Failed wordpress login from 82.78.85.71 (RO/Romania/Arad County/Arad/-)
|
Brute-Force
|
|
🇺🇸
kosada.com
|
|
Web bot: denial-of-service flood
|
DDoS Attack
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:16:31.145001 2026] [security2:error] [pid 2784:tid 2784] [client 82.78.85.71:63572] ModSecu ...
show more
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:16:31.145001 2026] [security2:error] [pid 2784:tid 2784] [client 82.78.85.71:63572] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 82.78.85.71 (+1 hits since last alert)|kidswow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kidswow.com"] [uri "/xmlrpc.php"] [unique_id "ajxXP4pvXDupT2ZP3xNJtgAAAB0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
Marc
|
|
82.78.85.71 - - [24/Jun/2026:21:39:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3403 "-" "WordPress.com; https://wordpress.com" 82.78.85.71 - - [24/Jun/2026:21:40:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3403 "-" "Jetpack by WordPress.com (Jetpack 12.1 ...
show more
82.78.85.71 - - [24/Jun/2026:21:39:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3403 "-" "WordPress.com; https://wordpress.com" 82.78.85.71 - - [24/Jun/2026:21:40:09 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3403 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 82.78.85.71 - - [24/Jun/2026:21:40:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3404 "-" "WordPress.com; https://wordpress.com"
show less
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
|
Web App Attack
|
|
Anonymous
|
|
IM360 WAF: Rate limit exceeded for XMLRPC DoS
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:42:50.932711 2026] [security2:error] [pid 22904:tid 22904] [client 82.78.85.71:58745] ModSe ...
show more
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:42:50.932711 2026] [security2:error] [pid 22904:tid 22904] [client 82.78.85.71:58745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 82.78.85.71 (+1 hits since last alert)|nancyscafeandcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nancyscafeandcatering.com"] [uri "/xmlrpc.php"] [unique_id "ajrvyhoniQcPSLYKE8__TgAAABc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
inlink.ltd
|
|
Known malicious PHP file or CMS probe
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 11:51:51.580118 2026] [security2:error] [pid 31737:tid 31737] [client 82.78.85.71:63663] ModSe ...
show more
(mod_security) mod_security (id:240335) triggered by 82.78.85.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 11:51:51.580118 2026] [security2:error] [pid 31737:tid 31737] [client 82.78.85.71:63663] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 82.78.85.71 (+1 hits since last alert)|monmouthcountydanceclasses.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "monmouthcountydanceclasses.com"] [uri "/xmlrpc.php"] [unique_id "ajqrlx53aALKetjVvz1OsQAAABw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Roderic
|
|
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 82.78.85.71 (RO/Romania/-)
|
Port Scan
|
|
🇨🇷
BOT_Rob
|
|
(SSH-Auth-WARN: Critical) login attempt [b'admin'/b''] failed from 82.78.85.71
|
Brute-Force
SSH
|
