🇧🇪
cmbplf
2026-06-23 02:51:52
(5 days ago)
391 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇺🇸
mnsf
2026-06-23 01:05:13
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 00:48:32
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:48:27.555899 2026] [security2:error] [pid 23442:tid 23442] [client 34.105.106.153:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||techcomparenow.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "techcomparenow.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajnX20i00KNNeJxrz_KrRAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-23 00:40:03
(5 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 00:28:54
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:28:48.062434 2026] [security2:error] [pid 15388:tid 15388] [client 34.105.106.153:54813] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.pikespeakjazz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.pikespeakjazz.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajnTQB5feycmMxBQAUc_hQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
parasquared
2026-06-23 00:28:12
(5 days ago)
2026/06/23 00:28:09.781 [34mINFO[0m http.log.access.log0 handled request {"request": {"remote_ip": ...
show more
2026/06/23 00:28:09.781 [34mINFO[0m http.log.access.log0 handled request {"request": {"remote_ip": "34.105.106.153", "proto": "HTTP/1.1", "method": "GET", "host": "parasquared.com", "uri": "/wp-includes/wlwmanifest.xml", "headers": {"Keep-Alive": ["300"], "Connection": ["keep-alive"], "User-Agent": ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"]}}, "status": 404}
2026/06/23 00:28:10.419 [34mINFO[0m http.log.access.log0 handled request {"request": {"remote_ip": "34.105.106.153", "proto": "HTTP/1.1", "method": "GET", "host": "parasquared.com", "uri": "/web/wp-includes/wlwmanifest.xml", "headers": {"Keep-Alive": ["300"], "Connection": ["keep-alive"], "User-Agent": ["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"]}}, "status": 404}
2026/06/23 00:28:10.792 [34mINFO[0m http.log.access.log0 handled request {"request": {"remote_ip": "34.105.106.153
...
show less
Brute-Force
Bad Web Bot
2026-06-23 00:23:35
(5 days ago)
34.105.106.153 - - [23/Jun/2026:02:23:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 655 "-" "Mozilla/5.0 ...
show more
34.105.106.153 - - [23/Jun/2026:02:23:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.105.106.153 - - [23/Jun/2026:02:23:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.105.106.153 - - [23/Jun/2026:02:23:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.105.106.153 - - [23/Jun/2026:02:23:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.105.106.153 - - [23/Jun/2026:02:23:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 00:12:38
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.105.106.153 (153.106.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 20:12:31.684580 2026] [security2:error] [pid 17625:tid 17625] [client 34.105.106.153:56681] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lyldevelopers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lyldevelopers.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajnPb7bKij-UojeYeRGWkgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack