๐ฌ๐ง
cg-design.co.uk
2026-09-07 18:44:18
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 162.158.91.172 (US/United States/-)
SQL Injection
๐ง๐ช
madeit
2026-09-03 11:38:44
(4 days ago)
Web App Attack
๐ง๐ช
madeit
2026-08-11 09:47:55
(3 weeks ago)
Web App Attack
๐ฌ๐ง
OptimusGO
2026-08-04 04:36:42
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-04 05:36:42 UTC
Log evidence:
08/04/2026-05:36:40.520011 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 162.158.91.172:14243 -> 185.127.18.66:2096
08/04/2026-05:36:41.543026 [**] [1:1000101:2] SECURITY Port Scan Detected - Multiple Unauthorized Ports [**] [Classification: Attempted Information Leak] [Priority: 1] {TCP} 162.158.91.172:14243 -> 185.127.18.66:2096
show less
Port Scan
Brute-Force
Anonymous
2026-07-28 06:44:08
(1 month ago)
[Tue Jul 28 08:44:07.355090 2026] [authz_core:error] [pid 28397] [client 162.158.91.172:13365] AH016 ...
show more
[Tue Jul 28 08:44:07.355090 2026] [authz_core:error] [pid 28397] [client 162.158.91.172:13365] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jul 28 08:44:07.722975 2026] [authz_core:error] [pid 28397] [client 162.158.91.172:13365] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Tue Jul 28 08:44:08.157894 2026] [authz_core:error] [pid 28397] [client 162.158.91.172:13365] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐บ๐ธ
mawan
2026-07-08 12:36:04
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
acadeova
2026-06-06 03:19:51
(3 months ago)
๐จ Recon detected (nft drop)
SRC=162.158.91.172
Observed=TCP dpt=80 in=enp0s6 ttl=53
Time=recent(jour ...
show more
๐จ Recon detected (nft drop)
SRC=162.158.91.172
Observed=TCP dpt=80 in=enp0s6 ttl=53
Time=recent(journalctl: 10 minutes ago)
Assessment=Generic scanning / reconnaissance (PORT_SCAN)
show less
Port Scan
Anonymous
2026-04-27 13:39:06
(4 months ago)
[Mon Apr 27 15:22:55.519688 2026] [authz_core:error] [pid 3678] [client 162.158.91.172:12584] AH0163 ...
show more
[Mon Apr 27 15:22:55.519688 2026] [authz_core:error] [pid 3678] [client 162.158.91.172:12584] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Apr 27 15:38:53.328693 2026] [authz_core:error] [pid 21206] [client 162.158.91.172:9306] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Apr 27 15:39:04.890970 2026] [authz_core:error] [pid 24228] [client 162.158.91.172:11636] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐บ๐ธ
mawan
2026-04-09 07:21:19
(4 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-04-05 22:01:13
(5 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-01-28 19:56:38
(7 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-01-09 16:12:31
(7 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ซ๐ท
Campus France
2025-11-24 04:44:44
(9 months ago)
162.158.91.172 - - [24/Nov/2025:05:44:44 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 ...
show more
162.158.91.172 - - [24/Nov/2025:05:44:44 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [24/Nov/2025:05:44:44 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [24/Nov/2025:05:44:44 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [24/Nov/2025:05:44:44 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
Campus France
2025-11-23 07:36:14
(9 months ago)
162.158.91.172 - - [23/Nov/2025:08:36:12 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 ...
show more
162.158.91.172 - - [23/Nov/2025:08:36:12 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [23/Nov/2025:08:36:13 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [23/Nov/2025:08:36:13 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [23/Nov/2025:08:36:13 +0100] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [23/Nov/2025:08:36:14 +0100] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "M
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
Campus France
2025-11-21 13:11:43
(9 months ago)
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
162.158.91.172 - - [21/Nov/2025:14:11:42 +0100] "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1
...
show less
Brute-Force
Web App Attack