 Posted - 04/09/2022 : 19:03:29
Nothing to worry about there, that's ModSecurity reporting on an attempt to access a WordPress file named xmlrpc.php. That's a very common attack vector as a successful attempt there could allow a malicious user to take control of a WordPress site. Most WordPress sites don't use that file any more, so even if you did run WordPress you could disable or even delete it (it's used for things like trackbacks/pingbacks, publishing content remotely via the WordPress mobile app etc, and has been superseded by the REST API); the site run will run fine without it. The source is a Microsoft IP address, so could be Microsoft gathering information on who is using what, but more likely a malicious user operating from Microsoft Azure, as these big cloud hosts are a popular home for hacker types. Given the other requests from the same address, all searching various locations for a WordPress install to attack, that seems more probable. Peter  Professional ecommerce web hosting services Shared hosting Windows & Linux | Dedicated servers | Domains | SSL Ecommerce Templates specialists since 2003 https://servelink.com | 
PHP warning: Undefined variable $jscript