This IP address has been reported a total of
16
times from
13 distinct
sources.
159.0.48.93 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Brazil
with 2
reports;
Switzerland
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
14
times;
Brute-Force
6
times;
Bad Web Bot
2
times;
Hacking
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show moreFail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
[SunOct2501:44:43.7620342026][security2:error][pid3898677:tid3898799][client159.0.48.93:0]ModSecurit ...
show more[SunOct2501:44:43.7620342026][security2:error][pid3898677:tid3898799][client159.0.48.93:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cpu-services.ch\"][uri\"/xmlrpc.php\"][unique_id\"at1C6-491vjtju0nOOZdxQAAAMk\"]
show less
Triggered Cloudflare WAF (firewallCustom) from SA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show moreTriggered Cloudflare WAF (firewallCustom) from SA.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
WordPress login / xmlrpc probing across multiple sites
[ThuOct2205:10:57.1885022026][security2:error][pid4052966:tid4053057][client159.0.48.93:0]ModSecurit ...
show more[ThuOct2205:10:57.1885022026][security2:error][pid4052966:tid4053057][client159.0.48.93:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"salonesamire.ch\"][uri\"/xmlrpc.php\"][unique_id\"atl-wafOwc6ywDcr7Q0BVAAAAJE\"]
show less
[WedOct2120:41:20.0297992026][security2:error][pid106068:tid106103][client159.0.48.93:0]ModSecurity: ...
show more[WedOct2120:41:20.0297992026][security2:error][pid106068:tid106103][client159.0.48.93:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"avcolor.ch\"][uri\"/xmlrpc.php\"][unique_id\"atkHUAAoLQYCCTYr7DhHlQAAAFU\"]
show less
