🇧🇷
ICS Labs
2026-07-09 16:22:47
(1 week ago)
ICS Labs identified 34.182.9.132 as a malicious indicator from threat intelligence.
DDoS Attack
Port Scan
Hacking
Brute-Force
Exploited Host
🇮🇳
evicky2002
2026-04-30 13:04:29
(2 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇫🇷
SpaceHost-Server
2026-04-29 22:39:40
(2 months ago)
Brute-Force
Web App Attack
🇧🇷
Halux
2026-04-29 11:15:52
(2 months ago)
34.182.9.132 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 11:07:53
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 34.182.9.132 (132.9.182.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.182.9.132 (132.9.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 07:07:48.467389 2026] [security2:error] [pid 23620:tid 23620] [client 34.182.9.132:52279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.circleofsound.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.circleofsound.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "afHmhAx-5nvutFuCGhRPNQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-04-29 11:00:12
(2 months ago)
2026/04/29 11:00:11 [error] 3278285#3278285: *187305198 access forbidden by rule, client: 34.182.9.1 ...
show more
2026/04/29 11:00:11 [error] 3278285#3278285: *187305198 access forbidden by rule, client: 34.182.9.132, server: finami.ph, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.ph"
2026/04/29 11:00:11 [error] 3278288#3278288: *187307362 access forbidden by rule, client: 34.182.9.132, server: finami.ph, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "finami.ph"
2026/04/29 11:00:11 [error] 3278288#3278288: *187307362 access forbidden by rule, client: 34.182.9.132, server: finami.ph, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.ph"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-04-29 10:54:29
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇦🇺
nzhost.co.nz
2026-04-29 10:43:56
(2 months ago)
$f2bV_matches
Hacking
Brute-Force
🇳🇿
Antinson
2026-04-29 10:42:51
(2 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
mieg
2026-04-29 10:42:47
(2 months ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 10:42:24
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 34.182.9.132 (132.9.182.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.182.9.132 (132.9.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 06:42:18.925729 2026] [security2:error] [pid 12035:tid 12035] [client 34.182.9.132:51923] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.thingstodonude.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.thingstodonude.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "afHgiqfgu-l4Zaey95T5WwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-04-29 10:30:33
(2 months ago)
(wordpress) Failed wordpress login from 34.182.9.132 (US/United States/Oregon/The Dalles/132.9.182.3 ...
show more
(wordpress) Failed wordpress login from 34.182.9.132 (US/United States/Oregon/The Dalles/132.9.182.34.bc.googleusercontent.com)
show less
Brute-Force
2026-04-29 10:30:17
(2 months ago)
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mo ...
show more
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.182.9.132 - - [29/Apr/2026:12:30:07 +0200] "POST /xmlrpc.php HTTP/1.1" 200 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win
...
show less
Hacking
Web App Attack
🇬🇧
venus.launch.bz
2026-04-29 10:20:20
(2 months ago)
(wpscan) WordPress probe detected from 34.182.9.132 (US/United States/132.9.182.34.bc.googleusercont ...
show more
(wpscan) WordPress probe detected from 34.182.9.132 (US/United States/132.9.182.34.bc.googleusercontent.com)
show less
Hacking
🇩🇪
dbmwebdesign
2026-04-29 10:15:30
(2 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack