This IP address has been reported a total of
55
times from
43 distinct
sources.
143.44.164.42 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 17
reports;
Switzerland
with 6
reports;
United Kingdom of Great Britain and Northern Ireland
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
36
times;
Brute-Force
19
times;
Hacking
11
times;
Bad Web Bot
9
times;
Port Scan
4
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ThuOct2201:22:46.2778062026][security2:error][pid416317:tid416358][client143.44.164.42:0]ModSecurit ...
show more[ThuOct2201:22:46.2778062026][security2:error][pid416317:tid416358][client143.44.164.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"kiteinvest.ch\"][uri\"/xmlrpc.php\"][unique_id\"atlJRjBqOy0QqXCpp_UhegAAAA4\"]
show less
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked ...
show moreBusted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-10-21 13:38 UTC.
show less
[TueOct2008:24:45.9717102026][security2:error][pid2108615:tid2108687][client143.44.164.42:0]ModSecur ...
show more[TueOct2008:24:45.9717102026][security2:error][pid2108615:tid2108687][client143.44.164.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"vg13.ch\"][uri\"/xmlrpc.php\"][unique_id\"atcJLfZkfgwweS3LSsMfVgAAAIU\"]
show less
[MonOct1922:44:19.0347082026][security2:error][pid646012:tid646111][client143.44.164.42:0]ModSecurit ...
show more[MonOct1922:44:19.0347082026][security2:error][pid646012:tid646111][client143.44.164.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"buonviaggio.ch\"][uri\"/xmlrpc.php\"][unique_id\"ataBI7bQE7iE_JZ9VII0PQAAAMU\"]
show less
Hacking
Web App Attack
Anonymous
WordPress login / xmlrpc probing across multiple sites
[ti-17al] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Ex ...
show more[ti-17al] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Example: 143.44.164.42 - - [18/Oct/2026:18:45:04 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6609 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/84.0.0.0 Safari/537.36"
143.44.164.42 - - [18/Oct/2026:18:45:05 +0200] "POST /xmlrpc.php HTTP/1.1" 403 6608 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.0.0 Safari/537.36"
143.44.164.42 - - [18/Oct/2026:18:45:06 +0200] "POST /xmlrpc.php HTTP/1.1" 403 8132 "-" "Mozilla/5.0 (Windows NT 6.3; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(wordpress) Failed wordpress login from 143.44.164.42 (PH/Philippines/143.44.164.42-rev.convergeict. ...
show more(wordpress) Failed wordpress login from 143.44.164.42 (PH/Philippines/143.44.164.42-rev.convergeict.com)
show less
Brute-Force
Anonymous
WordPress login / xmlrpc probing across multiple sites
Oct 17 05:14:09 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3213236]: Authentication failure for ...
show moreOct 17 05:14:09 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3213236]: Authentication failure for 93346 from 143.44.164.42
Oct 17 05:16:20 tubegrabe-stafel.ch Cerber(tubegrabe-stafel.ch)[3213553]: Authentication failure for admin from 143.44.164.42
...
show less
