This IP address has been reported a total of
25
times from
24 distinct
sources.
164.100.146.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Switzerland
with 3
reports;
Japan
with 1
report.
The most common categories in these recent reports were:
Web App Attack
10
times;
Brute-Force
4
times;
Hacking
4
times;
Exploited Host
1
time;
DDoS Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
Anonymous
[server.tmg.gr] httpd-xmlrpc-post: sites=www.ikee.gr; logs=/var/log/httpd/domains/ikee.gr.log; sampl ...
show more[server.tmg.gr] httpd-xmlrpc-post: sites=www.ikee.gr; logs=/var/log/httpd/domains/ikee.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /xmlrpc.php HTTP/1.1, POST /xmlrpc.php HTTP/1.1
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; x ...
show moreWordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/99.0.0.0 Safari/537.36
show less
[FriSep1118:48:42.7608722026][security2:error][pid3967395:tid3967433][client164.100.146.52:0]ModSecu ...
show more[FriSep1118:48:42.7608722026][security2:error][pid3967395:tid3967433][client164.100.146.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cybertelgroup.com\"][uri\"/xmlrpc.php\"][unique_id\"aqQw6sAfScqnesopA28-nQAAANA\"]
show less
[WedSep0919:31:07.7645462026][security2:error][pid3028147:tid3028380][client164.100.146.52:0]ModSecu ...
show more[WedSep0919:31:07.7645462026][security2:error][pid3028147:tid3028380][client164.100.146.52:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"4host.biz\"][uri\"/xmlrpc.php\"][unique_id\"aqGX226O2hbzljp9IgkbwAAAAEw\"]
show less
