🇺🇸
almazick
2026-10-07 19:35:54
(2 days ago)
Fail2Ban jail window on srv1.windowrepair.us banned 162.159.119.36 after 1 attempts
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 08:27:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 04:27:53.285698 2026] [security2:error] [pid 20601:tid 20601] [client 162.159.119.36:13472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mountainjaytherapy.com"] [uri "/.htaccess"] [unique_id "asYCiVn5WaYotSB_KQNwXAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-10-04 09:23:05
(5 days ago)
Web App Attack
🇧🇪
madeit
2026-09-24 16:31:18
(2 weeks ago)
Web App Attack
🇧🇪
madeit
2026-09-10 04:08:22
(4 weeks ago)
Web App Attack
🇧🇪
madeit
2026-08-25 07:31:31
(1 month ago)
Web App Attack
🇩🇪
abdubhai
2026-07-17 09:49:05
(2 months ago)
162.159.119.36 - - [17/Jul/2026:
...
Brute-Force
🇩🇪
abdubhai
2026-07-14 01:54:22
(2 months ago)
162.159.119.36 - - [14/Jul/2026:
...
Brute-Force
🇬🇧
pinguin
2026-06-16 02:15:09
(3 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /wp-login.php
UA: Mozilla/5.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
mawan
2026-06-13 07:05:59
(3 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
HJ5Ss4Ju
2026-06-09 07:59:10
(4 months ago)
WordPress XMLRPC scan :: 162.159.119.36 - - [09/Jun/2026:07:59:10 0000] "GET /xmlrpc.php HTTP/1.1" ...
show more
WordPress XMLRPC scan :: 162.159.119.36 - - [09/Jun/2026:07:59:10 0000] "GET /xmlrpc.php HTTP/1.1" 405 53 "https://mockbox.net/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Hacking
Brute-Force
Web App Attack
🇬🇧
pinguin
2026-06-03 20:06:40
(4 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /rest/V1/store/storeConfigs
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
pinguin
2026-04-29 20:26:12
(5 months ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /aws-config.js
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-30 01:27:01
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:26:54.555099 2026] [security2:error] [pid 29597:tid 29597] [client 162.159.119.36:9852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.seacorre.de"] [uri "/.git/refs/heads/main"] [unique_id "acnRXsyiiFboJPxk8LuGGQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 17:43:26
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 13:43:17.577876 2026] [security2:error] [pid 16386:tid 16386] [client 162.159.119.36:12227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fasllc.co"] [uri "/.env.save"] [unique_id "ab7YtSyHZQIqmJNXEGXUMwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
