This IP address has been reported a total of
160
times from
79 distinct
sources.
134.41.21.161 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[WedJun1703:47:48.9048652026][security2:error][pid2806252:tid2806955][client134.41.21.161:0]ModSecur ...
show more[WedJun1703:47:48.9048652026][security2:error][pid2806252:tid2806955][client134.41.21.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ristrutturazione-case.ch\"][uri\"/xmlrpc.php\"][unique_id\"ajH8xNjTYLHRn-_4e90yNgAAAQU\"]
show less
[MonJun1509:18:10.5721032026][security2:error][pid3788818:tid3788883][client134.41.21.161:0]ModSecur ...
show more[MonJun1509:18:10.5721032026][security2:error][pid3788818:tid3788883][client134.41.21.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"manuclean.ch\"][uri\"/xmlrpc.php\"][unique_id\"ai-nMrQIlTpZI9ViNxF5kgAAAEQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
[ns31.kdns.gr] httpd-xmlrpc-post: sites=global,savouras.gr; logs=/var/log/httpd/access_log,/var/log/ ...
show more[ns31.kdns.gr] httpd-xmlrpc-post: sites=global,savouras.gr; logs=/var/log/httpd/access_log,/var/log/httpd/domains/savouras.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
Anonymous
(wordpress) Failed wordpress login from 134.41.21.161 (CA/Canada/hlfxns018gw-134-41-21-161.dhcp-dyna ...
show more(wordpress) Failed wordpress login from 134.41.21.161 (CA/Canada/hlfxns018gw-134-41-21-161.dhcp-dynamic.fibreop.ns.bellaliant.net)
show less
Brute-Force
Anonymous
IP banned by Fail2Ban due to multiple malicious requests on Nginx
[SatJun1313:50:45.3867602026][security2:error][pid1054761:tid1054817][client134.41.21.161:0]ModSecur ...
show more[SatJun1313:50:45.3867602026][security2:error][pid1054761:tid1054817][client134.41.21.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"respiratrentino.it\"][uri\"/xmlrpc.php\"][unique_id\"ai1EFQleWq2B5l677KIBFQAAAFQ\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
Attac
Brute-Force
Anonymous
134.41.21.161 - - [12/Jun/2026:23:01:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 ...
show more134.41.21.161 - - [12/Jun/2026:23:01:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36"
134.41.21.161 - - [12/Jun/2026:23:01:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/73.0.0.0 Safari/537.36"
134.41.21.161 - - [12/Jun/2026:23:06:36 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.0.0 Safari/537.36"
134.41.21.161 - - [12/Jun/2026:23:06:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.0.0 Safari/537.36"
134.41.21.161 - - [12/Jun/2026:23:07:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/
...
show less
[FriJun1210:16:37.2262452026][security2:error][pid3378456:tid3378597][client134.41.21.161:0]ModSecur ...
show more[FriJun1210:16:37.2262452026][security2:error][pid3378456:tid3378597][client134.41.21.161:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"lascalasagl.ch\"][uri\"/xmlrpc.php\"][unique_id\"aivAZVZ-n-3BKhuNlYyUuAAAAQo\"]
show less
(wordpress) Failed wordpress login from 134.41.21.161 (CA/Canada/hlfxns018gw-134-41-21-161.dhcp-dyna ...
show more(wordpress) Failed wordpress login from 134.41.21.161 (CA/Canada/hlfxns018gw-134-41-21-161.dhcp-dynamic.fibreop.ns.bellaliant.net): (CF_ENABLE)
show less
Brute-Force
Showing 1 to
15
of 160 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩