๐บ๐ธ
mawan
2026-07-09 01:52:38
(1 day ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
palla89
2026-06-27 00:01:43
(1 week ago)
(wordpress) Failed wordpress login from 162.158.122.138 (ES/Spain/-)
Brute-Force
๐ฉ๐ช
abdubhai
2026-05-16 21:16:33
(1 month ago)
162.158.122.138 - - [17/May/2026
...
Brute-Force
Anonymous
2026-04-25 23:28:16
(2 months ago)
[Sun Apr 26 01:28:16.116218 2026] [authz_core:error] [pid 10635] [client 162.158.122.138:11405] AH01 ...
show more
[Sun Apr 26 01:28:16.116218 2026] [authz_core:error] [pid 10635] [client 162.158.122.138:11405] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Apr 26 01:28:16.171328 2026] [authz_core:error] [pid 10635] [client 162.158.122.138:11405] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Apr 26 01:28:16.206572 2026] [authz_core:error] [pid 10635] [client 162.158.122.138:11405] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-04-24 09:36:07
(2 months ago)
[Fri Apr 24 11:36:06.326736 2026] [authz_core:error] [pid 12340] [client 162.158.122.138:12671] AH01 ...
show more
[Fri Apr 24 11:36:06.326736 2026] [authz_core:error] [pid 12340] [client 162.158.122.138:12671] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Apr 24 11:36:06.364056 2026] [authz_core:error] [pid 12340] [client 162.158.122.138:12671] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Fri Apr 24 11:36:06.406402 2026] [authz_core:error] [pid 12340] [client 162.158.122.138:12671] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐จ๐ญ
lufi
2026-04-18 21:53:58
(2 months ago)
2026-04-18T23:53:58+02:00 lufischer04 ids442 2026-04-18 23:53:58 162.158.122.138: blacklistedPath: / ...
show more
2026-04-18T23:53:58+02:00 lufischer04 ids442 2026-04-18 23:53:58 162.158.122.138: blacklistedPath: /.env
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack
Anonymous
2025-08-30 03:02:11
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฉ๐ช
ps-center
2025-08-28 19:47:37
(10 months ago)
SS1: Web Attack GET /wp-login.php
GET /wp-admin/
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
ps-center
2025-08-25 16:51:17
(10 months ago)
SS1: Web Attack GET /admin.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
bastiweb
2025-08-22 00:09:23
(10 months ago)
162.158.122.138 - - [22/Aug/2025:02:08:49 +0200] "POST /wp-login.php HTTP/1.0" 200 8170 "https://www ...
show more
162.158.122.138 - - [22/Aug/2025:02:08:49 +0200] "POST /wp-login.php HTTP/1.0" 200 8170 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:02:08:54 +0200] "POST /wp-login.php HTTP/1.0" 200 8172 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:02:09:08 +0200] "POST /wp-login.php HTTP/1.0" 200 8170 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:02:09:13 +0200] "POST /wp-login.php HTTP/1.0" 200 8171 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
bastiweb
2025-08-21 23:36:59
(10 months ago)
162.158.122.138 - - [22/Aug/2025:01:32:19 +0200] "POST /wp-login.php HTTP/1.0" 200 8171 "https://www ...
show more
162.158.122.138 - - [22/Aug/2025:01:32:19 +0200] "POST /wp-login.php HTTP/1.0" 200 8171 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:01:34:08 +0200] "POST /wp-login.php HTTP/1.0" 200 8170 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:01:35:46 +0200] "POST /wp-login.php HTTP/1.0" 200 8169 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
162.158.122.138 - - [22/Aug/2025:01:36:34 +0200] "POST /wp-login.php HTTP/1.0" 200 8950 "https://www.goehler-baumpflege.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.
...
show less
Brute-Force
Web App Attack
Anonymous
2025-05-29 13:42:50
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2025-04-30 10:18:56
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 162.158.122.138 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240335) triggered by 162.158.122.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 06:18:49.111710 2025] [security2:error] [pid 32369:tid 32369] [client 162.158.122.138:44450] [client 162.158.122.138] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 90.77.31.233 (0+1 hits since last alert)|newmanwood.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "newmanwood.com"] [uri "/xmlrpc.php"] [unique_id "aBH5CUl7fgB7qUcgiBAQuAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2025-02-13 21:51:05
(1 year ago)
162.158.122.138 - - [13/Feb/2025:23:50:33 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 274 "-" "Mo ...
show more
162.158.122.138 - - [13/Feb/2025:23:50:33 +0200] "GET /wp-content/uploads/ HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36"
162.158.122.138 - - [13/Feb/2025:23:51:05 +0200] "GET /wp-includes/ID3/ HTTP/1.1" 404 274 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)"
...
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2025-01-20 14:01:13
(1 year ago)
162.158.122.138 - - [20/Jan/2025:15:57:27 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 274 "-" " ...
show more
162.158.122.138 - - [20/Jan/2025:15:57:27 +0200] "GET /wp-admin/js/index.php HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
162.158.122.138 - - [20/Jan/2025:16:01:12 +0200] "GET /wp-admin/function.php HTTP/1.1" 404 274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
...
show less
Web App Attack