This IP address has been reported a total of
12
times from
11 distinct
sources.
34.139.222.217 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Scanning for exploits - //wp-includes/wlwmanifest.xml
Web App Attack
Anonymous
{"reqId":"mMl7LpxnsClY9J1jyOyQ","level":1,"time":"2026-09-13T13:25:47+02:00","remoteAddr":"34.139.22 ...
show more{"reqId":"mMl7LpxnsClY9J1jyOyQ","level":1,"time":"2026-09-13T13:25:47+02:00","remoteAddr":"34.139.222.217","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"34.139.222.217\" tried to access using \"rodimus.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"dIJe2ZYgKNu2oeYJQBVQ","level":1,"time":"2026-09-13T13:25:48+02:00","remoteAddr":"34.139.222.217","user":"--","app":"core","method":"GET","url":"//wp-includes/wlwmanifest.xml","scriptName":"/index.php","message":"Trusted domain error. \"34.139.222.217\" tried to access using \"rodimus.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36","version":"34.0.3.2","data":{"app":"core"}}
{"reqId":"SeHx0z5cbNMUt1rcYBgA","level":1,"t
...
show less
[13/Sep/2026:14:20:36 +0300] -- 34.139.222.217 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp ...
show more[13/Sep/2026:14:20:36 +0300] -- 34.139.222.217 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/wlwmanifest.xml HTTP/1.1
show less
http-probing - IP: 34.139.222.217 - time="2026-09-13T13:19:04+02:00" level=info msg="(555f66b4f6a74 ...
show morehttp-probing - IP: 34.139.222.217 - time="2026-09-13T13:19:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.139.222.217 (US/396982) : 4h ban on Ip 34.139.222.217" module=db
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: // | query: author=1 (+1 more) | 2026-09-13 11:18 UTC
show less
(mod_security) mod_security (id:210410) triggered by 34.139.222.217 (US/United States/217.222.139.34 ...
show more(mod_security) mod_security (id:210410) triggered by 34.139.222.217 (US/United States/217.222.139.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less