This IP address has been reported a total of
83
times from
53 distinct
sources.
5.134.122.149 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 12
reports;
United States of America
with 7
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
32
times;
Brute-Force
15
times;
Bad Web Bot
9
times;
Hacking
7
times;
Port Scan
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-02T22:57:40.385611+00:00 instance-20260804-1025 wordpress(cazseguros.com)[1408627]: XML-RPC ...
show more2026-10-02T22:57:40.385611+00:00 instance-20260804-1025 wordpress(cazseguros.com)[1408627]: XML-RPC authentication attempt for unknown user wpupdatecore from 5.134.122.149
...
show less
Web App Attack
Anonymous
5.134.122.149 - - [03/Oct/2026:00:48:37 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 ...
show more5.134.122.149 - - [03/Oct/2026:00:48:37 +0800] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; rv:144.0) Gecko/20100101 Firefox/144.0"
...
show less
Bad Web Bot
Web App Attack
Anonymous
Blocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-lo ...
show moreBlocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-login brute-force and admin-panel scanning). Distributed botnet / automated tooling. No legitimate use.
show less
(PERMBLOCK) 5.134.122.149 (IT/Italy/-/-/-/[AS3242 Reevo S.p.A.]) has had more than 2 temp blocks in ...
show more(PERMBLOCK) 5.134.122.149 (IT/Italy/-/-/-/[AS3242 Reevo S.p.A.]) has had more than 2 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A
show less
(wordpress) Failed wordpress login from 5.134.122.149 (IT/Italy/-/-/hpt01.web.l1.armada.it/[redacted ...
show more(wordpress) Failed wordpress login from 5.134.122.149 (IT/Italy/-/-/hpt01.web.l1.armada.it/[redacted]): (CF_ENABLE)
show less
WordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ...
show moreWordPress login brute force | path: /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
show less
