๐ซ๐ท
dynamix
2026-09-14 16:58:58
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐ฉ
securejdprop
2026-08-21 06:03:22
(3 weeks ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
๐ง๐ช
madeit
2026-08-06 04:21:32
(1 month ago)
Web App Attack
Anonymous
2026-07-20 04:53:31
(1 month ago)
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 ...
show more
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.63.131 - - [20/Jul/2026:06:53:31 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 4
...
show less
Brute-Force
Web App Attack
Anonymous
2026-06-24 19:04:46
(2 months ago)
Malicious HTTP request to honeypot endpoint detected by Fail2Ban.
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-19 05:05:03
(2 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-06-14 05:54:01
(3 months ago)
WordPress XMLRPC scan :: 162.158.63.131 - - [14/Jun/2026:05:54:01 0000] "GET /xmlrpc.php HTTP/1.1" ...
show more
WordPress XMLRPC scan :: 162.158.63.131 - - [14/Jun/2026:05:54:01 0000] "GET /xmlrpc.php HTTP/1.1" 405 53 "https://mockbox.net/xmlrpc.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-06-10 05:25:08
(3 months ago)
WordPress XMLRPC scan :: 162.158.63.131 - - [10/Jun/2026:05:25:07 0000] "GET /xmlrpc.php HTTP/1.1" ...
show more
WordPress XMLRPC scan :: 162.158.63.131 - - [10/Jun/2026:05:25:07 0000] "GET /xmlrpc.php HTTP/1.1" 405 53 "https://mockbox.net/xmlrpc.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-06-09 11:35:18
(3 months ago)
WordPress XMLRPC scan :: 162.158.63.131 - - [09/Jun/2026:11:35:17 0000] "GET /xmlrpc.php HTTP/1.1" ...
show more
WordPress XMLRPC scan :: 162.158.63.131 - - [09/Jun/2026:11:35:17 0000] "GET /xmlrpc.php HTTP/1.1" 405 53 "https://mockbox.net/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
HJ5Ss4Ju
2026-05-19 08:00:03
(3 months ago)
WordPress XMLRPC scan :: 162.158.63.131 - - [19/May/2026:08:00:01 0000] "POST /xmlrpc.php HTTP/1.1" ...
show more
WordPress XMLRPC scan :: 162.158.63.131 - - [19/May/2026:08:00:01 0000] "POST /xmlrpc.php HTTP/1.1" 503 18967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
show less
Hacking
Brute-Force
Web App Attack
๐ธ๐ฌ
celestialcity
2026-04-06 02:16:57
(5 months ago)
Blocked by UFW on celestialcityas [8443/tcp] | SPT: 10640 | TTL: 48 | LEN: 60 | TOS: 0x00 โข Reported ...
show more
Blocked by UFW on celestialcityas [8443/tcp] | SPT: 10640 | TTL: 48 | LEN: 60 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
mnsf
2026-04-01 07:06:32
(5 months ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐ต๐ฑ
IROK
2026-03-27 19:15:04
(5 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
๐บ๐ธ
TPI-Abuse
2026-03-21 01:10:08
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 21:10:00.683239 2026] [security2:error] [pid 18144:tid 18144] [client 162.158.63.131:11007] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.amazedbyu.com"] [uri "/srv/.env"] [unique_id "ab3v6OBHz_ywACUeovNtLAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-20 09:08:33
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 162.158.63.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.63.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 05:08:25.990850 2026] [security2:error] [pid 24062:tid 24062] [client 162.158.63.131:14057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.jonathanwilsonphotography.com"] [uri "/.env.dev"] [unique_id "ab0OiYxEH0BR6D5TaLHMpwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack