Blocked by UFW (TCP on 54579)
Source port: 19635
TTL: 48
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 54579)
Source port: 19635
TTL: 48
Packet length: 60
TOS: 0x08
This report (for 5.253.204.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 17844)
Source port: 27345
TTL: 52
Packet length: 60
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 17844)
Source port: 27345
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 5.253.204.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 59280)
Source port: 12811
TTL: 53
Packet length: 60
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 59280)
Source port: 12811
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 5.253.204.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 1)
Source port: 9190
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 5. ...
show moreBlocked by UFW (TCP on 1)
Source port: 9190
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 5.253.204.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 49306)
Source port: 44230
TTL: 52
Packet length: 60
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 49306)
Source port: 44230
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 5.253.204.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /wp-config.php.orig HTTP/1.1, GET /wp-co ...
show moreBot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /wp-config.php.orig HTTP/1.1, GET /wp-content/plugins/cherry-plugin/admin/import-export/downl, GET /wp-config.php?aam-media=1 HTTP/1.1, GET /wp-config HTTP/1.1, GET /wp-config.bak HTTP/1.1, GET /wp-content/plugins/multi-plugin-installer/mpi_download.php, GET /wp-config.php2 HTTP/1.1, GET /wp-config.txt HTTP/1.1, GET /wp-config.php-old HTTP/1.1, GET /wp-config.php_bak HTTP/1.1, GET /wp-config.php.bk HTTP/1.1, GET /wp-config.old HTTP/1.1
show less
(mod_security) mod_security (id:210492) triggered by 5.253.204.172 (LU/Luxembourg/Luxembourg/Luxembo ...
show more(mod_security) mod_security (id:210492) triggered by 5.253.204.172 (LU/Luxembourg/Luxembourg/Luxembourg/-/[AS9009 M247 Europe SRL]): 5 in the last 3600 secs (CF_ENABLE)
show less
(mod_security) mod_security (id:210492) triggered by 5.253.204.172 (-): 1 in the last 300 secs; Port ...
show more(mod_security) mod_security (id:210492) triggered by 5.253.204.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 05 18:46:08.625433 2025] [security2:error] [pid 2772246:tid 2772246] [client 5.253.204.172:6330] [client 5.253.204.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcga.golf"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z_GysIP7-QoPZ7D0jf5MLgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 5.253.204.172 (LU/Luxemb ...
show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 5.253.204.172 (LU/Luxembourg/-)
show less
Port Scan
Showing 1 to
15
of 38 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩