This IP address has been reported a total of
33
times from
32 distinct
sources.
34.78.77.236 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
Netherlands
with 5
reports;
Switzerland
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
21
times;
Brute-Force
12
times;
Hacking
8
times;
Bad Web Bot
6
times;
VPN IP
1
time;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
17 attacks on PHP URLs, Wordpress URLs:
GET //xmlrpc.php?rsd HTTP/1.1
GET //sito/wp-includes/wlwmani ...
show more17 attacks on PHP URLs, Wordpress URLs:
GET //xmlrpc.php?rsd HTTP/1.1
GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1
show less
[ThuOct2215:36:29.9413862026][security2:error][pid427162:tid427213][client34.78.77.236:0]ModSecurity ...
show more[ThuOct2215:36:29.9413862026][security2:error][pid427162:tid427213][client34.78.77.236:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"atoRXXNOrdmjexS7Ed__mgAAAEo\"]
show less
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanni ...
show moreAutomated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-10-22T16:01:05+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: 1d.
Sample requests/indicators:
GET /wp-includes/wlwmanifest.xml -> 404
GET /blog/wp-includes/wlwmanifest.xml -> 404
GET /web/wp-includes/wlwmanifest.xml -> 404
GET /wordpress/wp-includes/wlwmanifest.xml -> 404
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.78.77.236 (BE/Belgium/236.77.78.34.b ...
show more(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.78.77.236 (BE/Belgium/236.77.78.34.bc.googleusercontent.com)
show less