Threat LevelCRITICAL80/1004 rule types across 2 attack categories
4 incidents on record · 4 rule types · last seen 9d ago
| PTR | 28.224.187.34.bc.googleusercontent.com |
Attack Analysis
WordPress XML-RPC Abuse
This IP accessed xmlrpc.php on a site where the owner has explicitly disabled it. xmlrpc.php is a legacy WordPress endpoint long abused for brute-force login attempts (via its multicall method) and DDoS pingback amplification; sites that don't need it disable it outright, making any access attempt inherently unwanted.
local blocklist
Bad Bot Flood
This IP generated over 20 HTTP 4xx errors in 60 seconds using a User-Agent identified as a bad bot (scraper, headless browser, or attack proxy). The high error rate indicates automated probing for vulnerabilities while trying to appear as generic traffic. Legitimate services respect robots.txt and do not flood servers with errors.
Reports (4)
| Date | Severity | Description |
|---|---|---|
| 27 Oct 2026 - 23:13 | high | WordPress: xmlrpc.php accessed |
| 27 Oct 2026 - 23:13 | high | Web: Bad bot 4xx flood — 20+ errors in 60s |
| 27 Oct 2026 - 23:12 | low | local blocklist |
| 27 Oct 2026 - 23:11 | medium | Query Guard — Xmlrpc Access |
EagleEye Intelligence