202.46.68.229

Not following 301 redirects — wasted requests | method: GET | path: /wp-sitemap-users-1.xml | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0

Web bot: denial-of-service flood

Autoban IP(2): 202.46.68.229 - Hostname: PT. Indonesia Comnet Plus - City: Bandung - Region: West Java - Country: Indonesia - Location: - Organization: AS9341 PT INDONESIA COMNETS PLUS - failed attempts.

[Wed Jun 10 07:54:19.456536 2026] [security2:error] [pid 461026:tid 139755579676352] [client 202.46.68.229:60462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/corerul ... show more [Wed Jun 10 07:54:19.456536 2026] [security2:error] [pid 461026:tid 139755579676352] [client 202.46.68.229:60462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "bing" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.26.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "254"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: bing found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 16; Pixel 9a Build/BP3A.250905.014; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36 BingSapphire/32.3.430811006 request_line = GET /index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa HTTP/2.0"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/geofisika/555558585-poster-antisipasi-gempa"] [unique_id "aii1uzWiSQZwfsk2ZfVpqAAAFxg"], referer https://www.bmkg.go.id/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[461076] [v ... show less

Web bot: DDoS

(wordpress) Failed wordpress login from 202.46.68.229 (ID/Indonesia/-)

(mod_security) mod_security (id:240335) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 16:22:29.462702 2026] [security2:error] [pid 1915:tid 1932] [client 202.46.68.229:61715] Mod ... show more (mod_security) mod_security (id:240335) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 16:22:29.462702 2026] [security2:error] [pid 1915:tid 1932] [client 202.46.68.229:61715] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.46.68.229 (+1 hits since last alert)|minutosrobados.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "minutosrobados.com"] [uri "/xmlrpc.php"] [unique_id "afO6BdJHEq4zacg5d6KOCwAAAI8"] show less

WordPress XMLRPC Brute Force Attack

(mod_security) mod_security (id:240335) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:09:45.628780 2026] [security2:error] [pid 12633:tid 12633] [client 202.46.68.229:55568] M ... show more (mod_security) mod_security (id:240335) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 06:09:45.628780 2026] [security2:error] [pid 12633:tid 12633] [client 202.46.68.229:55568] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 202.46.68.229 (+1 hits since last alert)|soundtrax.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "soundtrax.net"] [uri "/xmlrpc.php"] [unique_id "afMqad2KRH8CBxDnMT-84gAAABM"] show less

[SMB Honeypot Report] Timestamp: 2025-08-17 07:34:21 UTC Port: 63710 No credentials captured Attack Type: Unauthorized SMB connection attempt

/phpBB3/viewforum.php?f=15&sid=21e36f2efecc3283a9343a5da3a3ee07

Port probe to tcp/445 (smb) [srv126]

Unauthorized connection attempt

(mod_security) mod_security (id:210730) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 23:12:50.726615 2025] [security2:error] [pid 3141944:tid 3141944] [client 202.46.68.229:3706 ... show more (mod_security) mod_security (id:210730) triggered by 202.46.68.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 23:12:50.726615 2025] [security2:error] [pid 3141944:tid 3141944] [client 202.46.68.229:37066] [client 202.46.68.229] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Chandler/Thumbs.db"] [unique_id "aBwhMiDYK50rJT2NKUQ_SQAAACo"] show less