๐ซ๐ท
Stara
2026-09-16 13:55:21
(2 days ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:25:43
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:25:35.451662 2026] [security2:error] [pid 25796:tid 25796] [client 34.77.222.34:55291] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.energycapitalinvestments.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.energycapitalinvestments.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqqYzzGSCoM0azAQOUOkeAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
integrantservices.com
2026-09-16 13:15:56
(2 days ago)
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.c ...
show more
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.com)
show less
Brute-Force
๐ซ๐ท
ELYAZ
2026-09-16 13:13:00
(2 days ago)
(y3) Failed access -byebye- from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.com): ( ...
show more
(y3) Failed access -byebye- from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
Anonymous
2026-09-16 13:08:02
(2 days ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1
Hacking
Web App Attack
๐ฆ๐บ
electronico
2026-09-16 13:07:20
(2 days ago)
34.77.222.34 - - [17/Sep/2026:00:07:20 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/ ...
show more
34.77.222.34 - - [17/Sep/2026:00:07:20 +1100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2111 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐จ๐ญ
YF
2026-09-16 13:07:15
(2 days ago)
WordPress author enumeration
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:05:47
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:05:43.164059 2026] [security2:error] [pid 32050:tid 32050] [client 34.77.222.34:60298] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||elainebroussard.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "elainebroussard.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aqqUJ5BbP1q3LaNX8ZnL6wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 12:46:59
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.77.222.34 (34.222.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:46:54.737545 2026] [security2:error] [pid 19599:tid 19614] [client 34.77.222.34:52483] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.duplexgoldmine.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.duplexgoldmine.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqqPvqt3tvh-a2y5rCDs0QAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
maxxsense
2026-09-16 09:11:56
(2 days ago)
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.c ...
show more
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/34.222.77.34.bc.googleusercontent.com)
show less
Brute-Force
Anonymous
2026-09-16 09:07:30
(2 days ago)
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:26 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:26 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:28 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.77.222.34 - - [16/Sep/2026:11:07:28 +0200] "POST //xmlrpc.php HTTP/1.1" 2
...
show less
Hacking
Web App Attack
๐ฉ๐ช
grassau.com
2026-09-16 09:06:39
(2 days ago)
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/Brussels Capital/Brussels/34.222.77 ...
show more
(wordpress) Failed wordpress login from 34.77.222.34 (BE/Belgium/Brussels Capital/Brussels/34.222.77.34.bc.googleusercontent.com)
show less
Brute-Force
๐ฎ๐น
VHosting
2026-09-16 09:05:03
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-16 09:04:24
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-16 08:50:29
(2 days ago)
[16/Sep/2026:11:50:29 +0300] -- 34.77.222.34 Ban reason: User-Agent CMS-Checker
Bad Web Bot
Web App Attack