๐ฒ๐ฝ
octageeks.com
2026-07-28 04:07:59
(5 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-27 09:27:14
(5 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ซ๐ท
Catalin Negru
2026-07-27 09:17:27
(5 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐บ๐ธ
lostswordfish.com
2026-07-27 09:02:03
(5 days ago)
Wordfence waf block on cyos
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 08:59:18
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:59:13.218087 2026] [security2:error] [pid 3154725:tid 3154725] [client 34.24.195.83:63017] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cycon.kleens-uk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cycon.kleens-uk.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amcd4bFDcVACKBqZcNCobgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-07-27 08:51:55
(5 days ago)
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: //xmlrpc.php | UA: Mozilla/5.0 (Windows N ...
show more
CrowdSec: crowdsecurity/http-bf-wordpress_bf_xmlrpc | req: //xmlrpc.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
show less
Brute-Force
Web App Attack
๐ฆ๐บ
electronico
2026-07-27 08:50:42
(5 days ago)
34.24.195.83 - - [27/Jul/2026:19:50:42 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 200 1020 "-" "Mozilla/ ...
show more
34.24.195.83 - - [27/Jul/2026:19:50:42 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 200 1020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 08:43:51
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:43:43.319506 2026] [security2:error] [pid 882369:tid 882369] [client 34.24.195.83:60888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.crittergetterpestcontrol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.crittergetterpestcontrol.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amcaP7WaPK06A0SKC_rJ-AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-07-27 08:41:45
(5 days ago)
http-probing - IP: 34.24.195.83 - time="2026-07-27T10:41:45+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.24.195.83 - time="2026-07-27T10:41:45+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.24.195.83 (US/396982) : 4h ban on Ip 34.24.195.83" module=db
show less
Web App Attack
Anonymous
2026-07-27 08:35:12
(5 days ago)
34.24.195.83 - - [27/Jul/2026:10:35:11 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 438 "- ...
show more
34.24.195.83 - - [27/Jul/2026:10:35:11 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:35:11 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:35:11 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:35:11 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:35:12 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 438 "-" "Moz
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-07-27 08:33:14
(5 days ago)
34.24.195.83 - - [27/Jul/2026:10:33:11 +0200] "GET / HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT ...
show more
34.24.195.83 - - [27/Jul/2026:10:33:11 +0200] "GET / HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:33:11 +0200] "GET / HTTP/1.1" 301 566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:33:12 +0200] "GET / HTTP/1.1" 200 5851 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:33:12 +0200] "GET / HTTP/1.1" 200 5852 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24.195.83 - - [27/Jul/2026:10:33:12 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.24
show less
Web App Attack
Hacking
๐ง๐พ
lns.bz
2026-07-27 08:24:02
(5 days ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 08:23:07
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.24.195.83 (83.195.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:23:00.948005 2026] [security2:error] [pid 2179736:tid 2179743] [client 34.24.195.83:62647] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||conservativedemocrat.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "conservativedemocrat.aafm.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "amcVZEjEnfisSqj4rjTsIwAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-27 08:22:45
(5 days ago)
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:37 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.24.195.83 - - [27/Jul/2026:10:22:38 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT
...
show less
Hacking
Web App Attack
๐ฎ๐น
VHosting
2026-07-27 08:10:04
(5 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack