This IP address has been reported a total of
6
times from
5 distinct
sources.
79.174.52.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[SunAug3007:43:12.6753312026][security2:error][pid1036113:tid1036564][client79.174.52.138:0]ModSecur ...
show more[SunAug3007:43:12.6753312026][security2:error][pid1036113:tid1036564][client79.174.52.138:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"r102.ch\"][uri\"/media/com_fabrik/js/list-actions.js\"][unique_id\"apPC8OsX_2yiqvT6-OrzKwAAAEY\"]
show less
PHP code injection in the query string (webshell drop or RCE attempt) | method: GET | path: /spip.ph ...
show morePHP code injection in the query string (webshell drop or RCE attempt) | method: GET | path: /spip.php | query: a=%3C%3Fphp+header%28%21X-Spip-Filtre%3A+filtrer_entites%21%29+%3F%3E&b=%3F%3E%26%2339%3B.file_put_contents%28%26%2334%3B4ddb2f7 | 2026-08-29 05:53 UTC
show less