🇩🇪
klaus_ph
2026-09-29 08:20:16
UTC ·
(1 month ago)
2026-09-27 18:07:51,884 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 34.82.229.156
...
Bad Web Bot
🇩🇪
klaus_ph
2026-09-26 19:24:44
UTC ·
(1 month ago)
2026-09-25 19:39:28,308 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.82.229.156
...
Bad Web Bot
🇲🇽
octageeks.com
2026-09-24 04:14:57
UTC ·
(1 month ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇧🇪
cmbplf
2026-09-23 12:12:59
UTC ·
(1 month ago)
42.009 requests in 1 hour (3mos1w5d)
Brute-Force
Bad Web Bot
🇩🇪
yitzhaq
2026-09-23 11:55:07
UTC ·
(1 month ago)
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.82.229.156 - - [23/Se ...
show more
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.82.229.156 - - [23/Sep/2026:13:55:04 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.
show less
Web App Attack
Hacking
Anonymous
2026-09-23 11:55:01
UTC ·
(1 month ago)
[ns65.kdns.gr] httpd-xmlrpc-post: sites=www.andromedaln.space; logs=/var/log/httpd/domains/andromedaln.space.log; samples=//xmlrpc.php
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-23 11:48:43
UTC ·
(1 month ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
masterguru
2026-09-23 11:47:58
UTC ·
(1 month ago)
(xmlrpc) Apache: Failed xmlrpc access from 34.82.229.156 (US/United States/156.229.82.34.bc.googleusercontent.com): 10 in the last 3600 secs (0-180)
Hacking
🇺🇸
TPI-Abuse
2026-09-23 11:44:54
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.82.229.156 (156.229.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 07:44:46.185312 2026] [security2:error] [pid 31761:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 34.82.229.156 (156.229.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 07:44:46.185312 2026] [security2:error] [pid 31761:tid 31761] [client 34.82.229.156:64830] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||anamericanabroad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "anamericanabroad.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "arO7rtzW17YaIaTIEVYUlAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
1gz
2026-09-23 11:43:33
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: //cms/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.46 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: //cms/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
venus.launch.bz
2026-09-23 11:43:20
UTC ·
(1 month ago)
(wpscan) WordPress probe detected from 34.82.229.156 (US/United States/156.229.82.34.bc.googleusercontent.com)
Hacking
🇷🇴
iulianh
2026-09-23 11:37:33
UTC ·
(1 month ago)
80,443
Brute-Force
SSH
🇩🇪
FeG Deutschland
2026-09-23 11:28:56
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-23 11:25:20
UTC ·
(1 month ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇩🇪
LRob
2026-09-23 11:23:08
UTC ·
(1 month ago)
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack t ...
show more
This address sends abusive requests to WordPress sites we host: user enumeration through the REST API, xmlrpc.php calls the site refuses, endpoints the site does not serve. These are the reconnaissance and attack calls of automated WordPress attack tools, blocked on sight. Please check the machine behind it. | method: GET | path: / (+1 more) | 2026-09-23 11:23 UTC
show less
Web App Attack
Hacking