🇺🇸
TPI-Abuse
2026-07-27 08:45:07
(15 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.60.97.45 (45.97.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.60.97.45 (45.97.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:44:57.784986 2026] [security2:error] [pid 22551:tid 22569] [client 34.60.97.45:64680] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||vinylnotespodcast.com.104ventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vinylnotespodcast.com.104ventures.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amcaiZqC1ZzkA4a4RC1QIAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-07-27 08:42:23
(15 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.60.97.45 (US/United States/45.97.60.34.bc.g ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.60.97.45 (US/United States/45.97.60.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/07/27 10:42:15 [error] 2311784#2311784: *699092 access forbidden by rule, client: 34.60.97.45, server: villapardi.it, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "villapardi.it"
2026/07/27 10:42:16 [error] 2311784#2311784: *699092 access forbidden by rule, client: 34.60.97.45, server: villapardi.it, request: "GET //?author=1 HTTP/2.0", host: "villapardi.it"
2026/07/27 10:42:17 [error] 2311784#2311784: *699092 access forbidden by rule, client: 34.60.97.45, server: villapardi.it, request: "GET //?author=2 HTTP/2.0", host: "villapardi.it"
show less
Port Scan
🇩🇪
Marc
2026-07-27 08:35:28
(15 hours ago)
34.60.97.45 - - [27/Jul/2026:10:35:23 +0200] "POST //xmlrpc.php HTTP/1.1" 200 1030 "-" "Mozilla/5.0 ...
show more
34.60.97.45 - - [27/Jul/2026:10:35:23 +0200] "POST //xmlrpc.php HTTP/1.1" 200 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.60.97.45 - - [27/Jul/2026:10:35:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.60.97.45 - - [27/Jul/2026:10:35:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
show less
Brute-Force
Web App Attack
🇨🇭
ALPHANET
2026-07-27 08:24:12
(16 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-07-27 08:21:22
(16 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
paissangroup
2026-07-27 08:20:23
(16 hours ago)
Multiple WAF Violations
Web App Attack
🇷🇺
DZBOT
2026-07-27 08:14:48
(16 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇮🇹
CoreTech srl
2026-07-27 08:08:10
(16 hours ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=tubopress.it ip=34.60.97.45 richieste=612 rischio=A ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=tubopress.it ip=34.60.97.45 richieste=612 rischio=ALTO score=13 motivi=molte_richieste,molte_post,path_sospetti,poco_statico,dinamico cat_id=21,19,18 periodo=10min
show less
Web App Attack
Bad Web Bot
Brute-Force
🇭🇳
unph
2026-07-27 08:06:49
(16 hours ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇺🇸
masterguru
2026-07-27 08:01:48
(16 hours ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-169)
Hacking
🇩🇪
grassau.com
2026-07-27 08:01:07
(16 hours ago)
(wordpress) Failed wordpress login from 34.60.97.45 (US/United States/Iowa/Council Bluffs/45.97.60.3 ...
show more
(wordpress) Failed wordpress login from 34.60.97.45 (US/United States/Iowa/Council Bluffs/45.97.60.34.bc.googleusercontent.com)
show less
Brute-Force
🇩🇪
big-cloud.nl
2026-07-27 08:00:19
(16 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 07:58:32
(16 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.60.97.45 (45.97.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.60.97.45 (45.97.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 03:58:29.199233 2026] [security2:error] [pid 4069115:tid 4069115] [client 34.60.97.45:59049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ubuciko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ubuciko.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amcPpezjyi6d7cgYK8OMsgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski
2026-07-27 07:56:56
(16 hours ago)
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
Port Scan
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-07-27 07:55:04
(16 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack