JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

74.48.108.229

Neutral Activity

Abuse confidence score ?

0% Low Risk

23 reports

17 reporters · latest 2 years ago

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	iana.org
Country	🇺🇸 United States of America
City	Dallas, Texas

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

74.48.108.229 has been reported 23 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 74.48.108.229

Export CSV

This IP address has been reported a total of 23 times from 17 distinct sources. 74.48.108.229 was first reported on July 18th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 DJ	2024-08-08 18:53:00 (2 years ago)	hacking	Hacking Web App Attack
🇳🇱 jonathanselea.se	2024-08-06 22:18:36 (2 years ago)	Aug 6 22:18:32 scw-pizzadns-master sshd\[3814\]: Invalid user Admin from 74.48.108.229 port 36306 A ... show more Aug 6 22:18:32 scw-pizzadns-master sshd\[3814\]: Invalid user Admin from 74.48.108.229 port 36306 Aug 6 22:18:33 scw-pizzadns-master sshd\[3814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.48.108.229 Aug 6 22:18:35 scw-pizzadns-master sshd\[3814\]: Failed password for invalid user Admin from 74.48.108.229 port 36306 ssh2 show less	SSH
🇸🇬 oncord	2024-08-06 21:32:44 (2 years ago)	Form spam	Web Spam
Anonymous	2024-08-06 08:07:26 (2 years ago)	Honeypot hit.	Port Scan Hacking Exploited Host
🇲🇾 Rizzy	2024-08-06 01:23:54 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-05 08:57:41 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 05 04:57:35.293740 2024] [security2:error] [pid 3503570:tid 3503606] [client 74.48.108.229:54488] [client 74.48.108.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maroontribe.com"] [uri "/wp-config.phptmp"] [unique_id "ZrCT_3X6RGoFBC-2-SAKNgAAAcc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-08-05 06:41:13 (2 years ago)		Web Spam
🇺🇸 TPI-Abuse	2024-08-04 12:25:21 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 ... show more (mod_security) mod_security (id:210730) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 08:25:16.616241 2024] [security2:error] [pid 24672:tid 24672] [client 74.48.108.229:35540] [client 74.48.108.229] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aticom.net\|F\|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aticom.net"] [uri "/config.backup"] [unique_id "Zq9zLBy_EPALTX_C9Cl8BwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 oncord	2024-08-01 01:59:31 (2 years ago)	Form spam	Web Spam
🇫🇷 Kenshin869	2024-07-31 22:46:02 (2 years ago)	Wordpress unauthorized access attempt	Brute-Force
🇬🇧 Swiptly	2024-07-30 15:57:46 (2 years ago)	WordPress xmlrpc spam or enumeration ...	Web Spam Bad Web Bot Web App Attack
🇬🇧 Joe-Mark	2024-07-28 14:20:44 (2 years ago)	TCP Port: 143 . src-port=59242 Found TOR Exit nodes anonymizer [ filter blocked ] (34 ... show more TCP Port: 143 . src-port=59242 Found TOR Exit nodes anonymizer [ filter blocked ] (345) show less	Port Scan Hacking
🇺🇸 TPI-Abuse	2024-07-26 15:15:13 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 ... show more (mod_security) mod_security (id:225170) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 26 11:15:08.773184 2024] [security2:error] [pid 14280:tid 14280] [client 74.48.108.229:44756] [client 74.48.108.229] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|desertalfas.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desertalfas.org"] [uri "/wp-json/wp/v2/users/4"] [unique_id "ZqO9fAEFyt-zn_BJ4HZ9LQAAAAY"], referer: https://desertalfas.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-07-23 15:41:11 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-07-23 07:25:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 74.48.108.229 (murrtube.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 03:25:28.796502 2024] [security2:error] [pid 4071:tid 4071] [client 74.48.108.229:39072] [client 74.48.108.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circleinthesquare.org"] [uri "/wp-config.phpOLD"] [unique_id "Zp9a6IHpT_wWIoOS3fX30AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 123.30.106.64

🇹🇭 118.173.26.123

🇧🇩 103.181.75.130

🇱🇹 62.60.130.201

🇸🇬 51.79.199.16

🇳🇱 45.148.10.21

🇨🇳 218.93.165.59

🇳🇱 185.2.80.253

🇮🇩 182.11.152.134

🇧🇷 177.30.68.132

🇬🇧 165.154.129.151

🇭🇰 152.32.212.224

🇵🇰 101.53.225.5

🇸🇪 93.158.90.152

🇷🇺 81.16.142.23

🇸🇬 61.29.254.109

🇬🇧 35.203.210.254

🇺🇦 31.31.108.242

🇺🇸 17.166.237.170

🇷🇺 212.164.24.165