🇲🇽
octageeks.com
2026-09-24 04:18:06
UTC ·
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 12:54:11
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.29.145.167 (167.145.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:54:04.163800 2026] [security2:error] [pid 5518:tid 5 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.29.145.167 (167.145.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 08:54:04.163800 2026] [security2:error] [pid 5518:tid 5518] [client 34.29.145.167:35398] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tasteshop.l3l4.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tasteshop.l3l4.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "arPL7L54N-ha8n_ZXaz0CgAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-09-23 12:44:04
UTC ·
(1 month ago)
Wordfence waf block on floridaactioncommittee
Web App Attack
2026-09-23 12:37:26
UTC ·
(1 month ago)
34.29.145.167 - - [23/Sep/2026:20:37:25 +0800] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
2026-09-23 12:21:40
UTC ·
(1 month ago)
POST /xmlrpc.php HTTP/1.1
...
Brute-Force
🇲🇹
Malta
2026-09-23 12:19:45
UTC ·
(1 month ago)
34.29.145.167 - - [23/Sep/2026:14:19:45 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
🇩🇪
FeG Deutschland
2026-09-23 12:04:13
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
LRob
2026-09-23 12:00:02
UTC ·
(1 month ago)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack t ...
show more
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: POST | path: /xmlrpc.php | 2026-09-23 12:00 UTC
show less
Web App Attack
Hacking
🇺🇸
Rbot
2025-09-21 17:01:00
UTC ·
(1 year ago)
wp-json/oembed/1.0/embed?url=https%3A%2F%2Fnuevaiqtest.com%2F
Hacking
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-09-20 20:08:55
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-09-19 20:08:53
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇬🇧
SecondEdge
2025-09-19 06:27:31
UTC ·
(1 year ago)
A web attack was detected from 34.29.145.167 (United States / Iowa / Council Bluffs) against client.second-edge.com (Wordpress,XMLRPC) over 3s.
Web App Attack
🇳🇴
tmiland
2025-09-19 03:27:28
UTC ·
(1 year ago)
(manifest) WordPress wlwmanifest.xml Attack 34.29.145.167 (US/United States/167.145.29.34.bc.googleusercontent.com): 3 in the last 3600 secs
Blog Spam
Brute-Force
Web App Attack
2025-09-19 00:26:19
UTC ·
(1 year ago)
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET / HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET //wp ...
show more
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET / HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET / HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.29.145.167 - - [19/Sep/2025:00:26:18 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
FTP Brute-Force
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇷🇺
andrey volobuev
2025-09-19 00:25:51
UTC ·
(1 year ago)
[19/Sep/2025:03:25:50 +0300] - 404 404 - GET http zerotier.bebesh.ru "/wp-includes/wlwmanifest.xml" [Client 34.29.145.167] [Length 1814] [Gzip -] [Sent-to 192.168.1.172] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko ...
show more
[19/Sep/2025:03:25:50 +0300] - 404 404 - GET http zerotier.bebesh.ru "/wp-includes/wlwmanifest.xml" [Client 34.29.145.167] [Length 1814] [Gzip -] [Sent-to 192.168.1.172] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[19/Sep/2025:03:25:50 +0300] - 404 404 - GET http zerotier.bebesh.ru "/xmlrpc.php?rsd" [Client 34.29.145.167] [Length 1814] [Gzip -] [Sent-to 192.168.1.172] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[19/Sep/2025:03:25:50 +0300] - 404 404 - GET http zerotier.bebesh.ru "/xmlrpc.php?rsd" [Client 34.29.145.167] [Length 1814] [Gzip -] [Sent-to 192.168.1.172] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[19/Sep/2025:03:25:51 +0300] - 404 404 - GET http zerotier.bebesh.ru "/blog/wp-includes/wlwmanifest.xml" [Client 34.29.145.167] [Length 1814] [Gzip -]
...
show less
Brute-Force
Web App Attack
