Total reports
7 from
6 distinct
reporters
First reported
August 11th 2023
Most recent report
41 minutes ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
Most common categories
Bad Web Bot
1
DDoS Attack
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
LRob
2026-11-12 08:00:20
UTC ·
(41 minutes ago)
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/248c0b263a11889bf266fc4916fdbeb0d953b090/shipped/parsers/postfix-auth-abort.yaml | src_port: 52836 | ua: Mozilla/5 ...
show more
Proxynvader botnet, code forge crawl: https://shieldlist.eu/en/threats/proxynvader | path: /Shieldlist/shieldlist-controller/src/commit/248c0b263a11889bf266fc4916fdbeb0d953b090/shipped/parsers/postfix-auth-abort.yaml | src_port: 52836 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-25 11:34:01
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-02 16:41:52
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
rh24
2026-07-15 07:56:01
UTC ·
(3 months ago)
(wordpress) Failed wordpress login from 49.43.3.68 (IN/India/-): (CF_ENABLE)
Brute-Force
2026-07-15 07:55:09
UTC ·
(3 months ago)
49.43.3.68 - - [15/Jul/2026:09:54:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
49.43.3.68 - - [15/Jul/2026:09:54:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com ...
show more
49.43.3.68 - - [15/Jul/2026:09:54:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
49.43.3.68 - - [15/Jul/2026:09:54:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2)"
49.43.3.68 - - [15/Jul/2026:09:54:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com"
49.43.3.68 - - [15/Jul/2026:09:54:58 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "WordPress.com; https://wordpress.com"
49.43.3.68 - - [15/Jul/2026:09:55:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack/12.1; WordPress/6.3; http://site37170474.com"
...
show less
Brute-Force
Web App Attack
🇳🇱
exxos
2025-09-16 19:05:26
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking
🇫🇮
bittiguru.fi
2023-08-11 10:54:32
UTC ·
(3 years ago)
49.43.3.68 - [11/Aug/2023:13:53:31 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-"
49.43.3.68 - [11/Aug/2023:13:54:32 +0300] "POST /xmlrpc.php HTTP/1.1" 404 47719 "-" "Mozilla ...
show more
49.43.3.68 - [11/Aug/2023:13:53:31 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-"
49.43.3.68 - [11/Aug/2023:13:54:32 +0300] "POST /xmlrpc.php HTTP/1.1" 404 47719 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-"
...
show less
Hacking
Brute-Force
Web App Attack
