๐ซ๐ท
SpaceHost-Server
2026-09-17 22:20:28
(4 days ago)
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-17 09:29:03
(5 days ago)
34.156.144.142 - - [17/Sep/2026:09:28:04 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5 ...
show more
34.156.144.142 - - [17/Sep/2026:09:28:04 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.156.144.142"
34.156.144.142 - - [17/Sep/2026:09:28:04 +0000] "GET //?author=1 HTTP/1.1" 403 2642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.156.144.142"
34.156.144.142 - - [17/Sep/2026:09:28:04 +0000] "GET //?author=1 HTTP/1.1" 403 2642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.156.144.142"
34.156.144.142 - - [17/Sep/2026:09:28:04 +0000] "GET //?author=2 HTTP/1.1" 403 2642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" "-" edge="34.156.144.142"
34.156.144.142 - - [17/Sep/2026:09:28:05 +0000] "GET //?author=2 HTTP/
...
show less
Web App Attack
๐ซ๐ฎ
6kilowatti
2026-09-17 09:27:55
(5 days ago)
34.156.144.142 - - [17/Sep/2026:09:27:54 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 552 ...
show more
34.156.144.142 - - [17/Sep/2026:09:27:54 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-17 09:27:12
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:27:08.101612 2026] [security2:error] [pid 1027:tid 1027] [client 34.156.144.142:56540] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||casadelsolmexico.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casadelsolmexico.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aquybCpZYA4iEyVoFFh_YQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
findlab
2026-09-17 09:25:01
(5 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-17 09:21:25
(5 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
๐บ๐ธ
integrantservices.com
2026-09-17 09:14:30
(5 days ago)
(wordpress) Failed wordpress login from 34.156.144.142 (BE/Belgium/142.144.156.34.bc.googleuserconte ...
show more
(wordpress) Failed wordpress login from 34.156.144.142 (BE/Belgium/142.144.156.34.bc.googleusercontent.com)
show less
Brute-Force
๐ฉ๐ช
bescared
2026-09-17 09:10:25
(5 days ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-09-17 09:09:20
(5 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-17 09:01:53
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 05:01:49.743783 2026] [security2:error] [pid 9353:tid 9353] [client 34.156.144.142:51324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||campnecon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "campnecon.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqusfeQf7k4tQ2LDxD7nAgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-17 08:50:04
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ง๐พ
lns.bz
2026-09-17 08:47:55
(5 days ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-17 08:42:26
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.156.144.142 (142.144.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:42:19.425979 2026] [security2:error] [pid 29601:tid 29601] [client 34.156.144.142:61103] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.caddydad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.caddydad.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqun63KHxLKAeO0VUv6D-wAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-09-17 08:39:46
(5 days ago)
2026/09/17 08:39:44 [error] 3266575#3266575: *7469312 access forbidden by rule, client: 34.156.144.1 ...
show more
2026/09/17 08:39:44 [error] 3266575#3266575: *7469312 access forbidden by rule, client: 34.156.144.142, server: ca5h.win, request: "GET //wp-includes/wlwmanifest.xml HTTP/1.1", host: "ca5h.win"
2026/09/17 08:39:45 [error] 3266575#3266575: *7469320 access forbidden by rule, client: 34.156.144.142, server: ca5h.win, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "ca5h.win"
2026/09/17 08:39:45 [error] 3266575#3266575: *7469320 access forbidden by rule, client: 34.156.144.142, server: ca5h.win, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "ca5h.win"
...
show less
Web App Attack