This IP address has been reported a total of
8
times from
8 distinct
sources.
34.48.247.56 was first reported on
August 27th 2026 , and the most recent report was
1 month ago United States of America
with 3
reports;
Brazil
with 1
report;
Finland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
5
times;
Brute-Force
5
times;
Bad Web Bot
3
times;
Hacking
1
time;
SSH
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
mnsf
2026-08-27 17:05:44
(1 month ago)
Abuse Detected (15)
Brute-Force
Web App Attack
🇫🇮
000rosiu
2026-08-27 16:16:01
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: //wp-includes/wlwmanifest.xml | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-27 16:15:58
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.48.247.56 (56.247.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.48.247.56 (56.247.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:15:53.981289 2026] [security2:error] [pid 31720:tid 31720] [client 34.48.247.56:53401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||imbrasacademic.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "imbrasacademic.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "apBiuRsutWn6F9YaHrbkxQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
IDnX
2026-08-27 16:12:01
(1 month ago)
34.48.247.56 - - [27/Aug/2026:23:11:58 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 ...
show more
34.48.247.56 - - [27/Aug/2026:23:11:58 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.48.247.56 - - [27/Aug/2026:23:11:59 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.48.247.56 - - [27/Aug/2026:23:11:59 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.48.247.56 - - [27/Aug/2026:23:11:59 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.48.247.56 - - [27/Aug/2026:23:12:00 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Brute-Force
🇮🇹
VHosting
2026-08-27 16:10:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇧🇷
Halux
2026-08-27 16:09:46
(1 month ago)
34.48.247.56 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-08-27 16:07:54
(1 month ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇦
URAN Publishing Service
2026-08-27 15:28:29
(1 month ago)
[27/Aug/2026:18:28:29 +0300] -- 34.48.247.56 Ban reason: User-Agent CMS-Checker
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
