🇧🇪
madeit
2026-11-09 07:49:57
UTC ·
(4 hours ago)
Web App Attack
🇯🇵
S.O.B.A. Dev.
2026-11-02 11:20:11
UTC ·
(1 week ago)
Persistent port scanning or vulnerability scanning
Port Scan
🇺🇸
TPI-Abuse
2026-10-10 10:25:05
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 06:25:01.158896 2026] [security2:error] [pid 9131:tid 9131] [client 162.159.119.76:12666] M ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 06:25:01.158896 2026] [security2:error] [pid 9131:tid 9131] [client 162.159.119.76:12666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattymoorearmstrong.com"] [uri "/.htaccess"] [unique_id "asoSfeDRkGLpEyL3TFL4BAAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 00:13:33
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 20:13:30.695298 2026] [security2:error] [pid 3122204:tid 3122208] [client 162.159.119.76:11 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 20:13:30.695298 2026] [security2:error] [pid 3122204:tid 3122208] [client 162.159.119.76:11737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sailcleaner.com"] [uri "/wp-config.php"] [unique_id "asLrqta6ceahnbVJkBuA4AAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-29 16:41:12
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇧🇪
madeit
2026-09-25 19:55:40
UTC ·
(1 month ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 01:35:59
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 21:35:54.686551 2026] [security2:error] [pid 18806:tid 18806] [client 162.159.119.76:11633] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 21:35:54.686551 2026] [security2:error] [pid 18806:tid 18806] [client 162.159.119.76:11633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.theinjuredparties.com"] [uri "/.git/config"] [unique_id "apOI-ibrH-hmWUqfQnqnMAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-08-29 08:16:28
UTC ·
(2 months ago)
162.159.119.76 - - [29/Aug/2026:07:51:29 +0000] "GET /cgi-bin/bless.php HTTP/2.0" 404 21207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "134.122.113.99"
162.159.119.76 - - ...
show more
162.159.119.76 - - [29/Aug/2026:07:51:29 +0000] "GET /cgi-bin/bless.php HTTP/2.0" 404 21207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "134.122.113.99"
162.159.119.76 - - [29/Aug/2026:07:54:42 +0000] "GET /cgi-bin/file.php HTTP/2.0" 404 21148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "134.122.113.99"
162.159.119.76 - - [29/Aug/2026:07:57:41 +0000] "GET /cgi-bin/autoload_classmap.php HTTP/2.0" 404 21149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "134.122.113.99"
162.159.119.76 - - [29/Aug/2026:08:15:46 +0000] "GET /cgi-bin/moon.php HTTP/2.0" 404 21147 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "134.122.113.99"
162.159.119.76 - - [29/Aug/2026:08:16:03 +0000] "GET /cgi-bin/link
...
show less
Bad Web Bot
🇮🇩
securejdprop
2026-08-21 09:22:08
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering custom/vpatch-bad-cloudflare.
Hacking
🇧🇪
madeit
2026-08-18 09:40:48
UTC ·
(2 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 22:37:31
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 18:37:22.968853 2026] [security2:error] [pid 24404:tid 24404] [client 162.159.119.76:25512] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 18:37:22.968853 2026] [security2:error] [pid 24404:tid 24404] [client 162.159.119.76:25512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.unified-dispatch.com"] [uri "/.env"] [unique_id "anZeIsGzwp__OgdKR8PB6AAAAAE"], referer: https://www.google.com/search?q=www.unified-dispatch.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-05 15:19:08
UTC ·
(3 months ago)
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [05/ ...
show more
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [05/Aug/2026:17:19:07 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1
...
show less
Brute-Force
Web App Attack
Anonymous
2026-08-04 03:41:22
UTC ·
(3 months ago)
162.159.119.76 - - [04/Aug/2026:05:41:21 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [04/ ...
show more
162.159.119.76 - - [04/Aug/2026:05:41:21 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [04/Aug/2026:05:41:21 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [04/Aug/2026:05:41:21 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [04/Aug/2026:05:41:21 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
162.159.119.76 - - [04/Aug/2026:05:41:22 +0200] "GET //cms/wp-includes/wlwmanifest.xml HTTP/
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-29 09:13:36
UTC ·
(3 months ago)
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
162.159.119.76 - - [29 ...
show more
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
162.159.119.76 - - [29/Jul/2026:11:13:35 +0200] "GET //wp1/wp-includes/wlwmanifest.xml H
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 12:11:30
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:11:23.026172 2026] [security2:error] [pid 12627:tid 12627] [client 162.159.119.76:11057] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.159.119.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 08:11:23.026172 2026] [security2:error] [pid 12627:tid 12627] [client 162.159.119.76:11057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flyc2c.com"] [uri "/.env.local"] [unique_id "ajUx6xgX--A_Fv6I3oL0swAAABI"], referer: https://www.google.com/search?q=flyc2c.com
show less
Brute-Force
Bad Web Bot
Web App Attack