xmlrpc.php mod secrule

Free Modsecurity rules - Comodo Web Application Fi
1

Any idea if this is false positive? Always see the first one then the second one almost always appears thereafter. Mostly wordpress is not all.

[Fri Oct 31 15:53:24.737743 2014] [:error] [pid 716627:tid 140314937308928] [client 141.255.167.121] ModSecurity: XML parser error: XML: Failed parsing document. [hostname “domainname”] [uri “/xmlrpc.php”] [unique_id “VFOUVMXyRKIACu9T-lIAAACW”]

[Fri Oct 31 15:53:24.737845 2014] [:error] [pid 716627:tid 140314937308928] [client 141.255.167.121] ModSecurity: Warning. Match of “eq 0” against “REQBODY_ERROR” required. [file “/var/cpanel/cwaf/rules/cwaf_01.conf”] [line “163”] [id “210230”] [msg “COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.”] [data “XML parser error: XML: Failed parsing document.”] [severity “CRITICAL”] [hostname “domainname”] [uri “/xmlrpc.php”] [unique_id “VFOUVMXyRKIACu9T-lIAAACW”]

Thanks

2

well in wordpress old version there was exploit to take down website thru that file. Hope thats not falsepositive