Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-13 21:26 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Det ...
show moreExploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-11-13 21:26 UTC. Samples: GET //wp-includes/wlwmanifest.xml 444; GET //xmlrpc.php 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban.
show less
2026-11-13T14:50:45.539581-05:00 instance-20260804-1025 wordpress(cazseguros.com)[717702]: XML-RPC authentication failure for cazadmin from 34.60.219.223
2026-11-13T14:50:45.944734-05:00 instance-20260804-1025 wordpress(cazseguros.com)[716422]: XML-R ...
show more2026-11-13T14:50:45.539581-05:00 instance-20260804-1025 wordpress(cazseguros.com)[717702]: XML-RPC authentication failure for cazadmin from 34.60.219.223
2026-11-13T14:50:45.944734-05:00 instance-20260804-1025 wordpress(cazseguros.com)[716422]: XML-RPC authentication failure for cazadmin from 34.60.219.223
2026-11-13T14:50:46.253976-05:00 instance-20260804-1025 wordpress(cazseguros.com)[716743]: XML-RPC authentication failure for cazadmin from 34.60.219.223
...
show less
[FriNov1320:47:16.3620602026][security2:error][pid1273676:tid1273750][client34.60.219.223:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\" ...
show more[FriNov1320:47:16.3620602026][security2:error][pid1273676:tid1273750][client34.60.219.223:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"whatsdecor.ch\"][uri\"/xmlrpc.php\"][unique_id\"avdpRLLHl_zSwbcdqySs9AAAAIU\"]
show less