🇩🇪
pedrocosta
2026-10-22 11:39:18
(1 day ago)
49.43.161.159 - - [22/Oct/2026:11:39:15 +0000] "GET /wp-json/dokan/v1/wholesale/customers?user_id=4 ...
show more
49.43.161.159 - - [22/Oct/2026:11:39:15 +0000] "GET /wp-json/dokan/v1/wholesale/customers?user_id=4 HTTP/2.0" 404 137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
49.43.161.159 - - [22/Oct/2026:11:39:17 +0000] "GET /wp-json/buddypress/v1/members HTTP/2.0" 404 137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
49.43.161.159 - - [22/Oct/2026:11:39:17 +0000] "GET /wp-json/ldlms/v2/users HTTP/2.0" 404 137 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 14:20:30
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:20:25.158315 2026] [security2:error] [pid 6916:tid 6916] [client 49.43.161.159:54122] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fgrotary.org"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atjKKVrJgD_Ru4kEV80mKQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-10-20 03:51:06
(4 days ago)
49.43.161.159 - - [20/Oct/2026:05:51:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ...
show more
49.43.161.159 - - [20/Oct/2026:05:51:06 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-17 13:55:26
(6 days ago)
(mod_security) mod_security (id:225170) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 09:55:19.415856 2026] [security2:error] [pid 20677:tid 20684] [client 49.43.161.159:40208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tomithai.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tomithai.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atN-RzRB6dHVqZQVTZm_LgAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-10-03 00:22:55
(3 weeks ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇺🇸
kosada.com
2026-07-06 15:12:33
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇳🇱
wlt-blocker
2026-05-27 03:10:57
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇫🇷
Hiigara
2026-05-01 23:01:37
(5 months ago)
connection attempt : 49.43.161.159 on port : tcp/23 (Telnet)
Port Scan
🇺🇸
TPI-Abuse
2026-04-23 05:39:04
(6 months ago)
(mod_security) mod_security (id:240335) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 49.43.161.159 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 01:38:56.049581 2026] [security2:error] [pid 16050:tid 16050] [client 49.43.161.159:61063] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 49.43.161.159 (+1 hits since last alert)|usbea.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "usbea.com"] [uri "/xmlrpc.php"] [unique_id "aemwcP-GgIjIIpXAgg8LXQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-04-22 10:18:42
(6 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
Kenshin869
2026-04-21 04:36:37
(6 months ago)
Wordpress unauthorized access attempt
Brute-Force
🇺🇸
kosada.com
2026-03-10 11:27:10
(7 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇩🇪
grassau.com
2026-01-14 16:51:58
(9 months ago)
(wordpress) Failed wordpress login from 49.43.161.159 (IN/India/-)
Brute-Force
2026-01-14 12:06:10
(9 months ago)
Trying to access config files
Web App Attack
🇦🇷
Bruno
2026-01-14 04:59:11
(9 months ago)
Port Scanner: 49.43.161.159
Port Scan
