🇺🇸
TPI-Abuse
2025-11-08 01:27:00
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 63.135.161.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 20:26:57.471155 2025] [security2:error] [pid 18292:tid 18308] [client 63.135.161.222:36749] ...
show more
(mod_security) mod_security (id:225170) triggered by 63.135.161.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 07 20:26:57.471155 2025] [security2:error] [pid 18292:tid 18308] [client 63.135.161.222:36749] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.greencitymethods.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.greencitymethods.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQ6cYaAHMz9to-n9rqITTQAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2025-11-05 16:01:22
UTC ·
(1 year ago)
404 errors (Vulnerability scan)
Brute-Force
Web App Attack
🇫🇮
Shaik Sai Meera
2025-11-05 08:50:23
UTC ·
(1 year ago)
IM360 WAF: Infectors: Suspicious access attempt (webshell)
FTP Brute-Force
Open Proxy
Brute-Force
🇺🇸
mnsf
2025-11-03 13:05:03
UTC ·
(1 year ago)
Request Overload (117)
Brute-Force
Web App Attack
🇺🇸
myagent.site
2025-11-03 01:42:10
UTC ·
(1 year ago)
Blocking for trying to access an exploit file: /install.php
Hacking
🇮🇩
securejdprop
2025-11-01 23:25:20
UTC ·
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Go-http-client User-Agent Observed Inbound). Ip 63.135.161.222 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-01 23:25:19.17942 ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Go-http-client User-Agent Observed Inbound). Ip 63.135.161.222 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2025-11-01 23:25:19.179422639 +0000 UTC
show less
Web App Attack
🇸🇪
nekopavel
2025-10-31 05:09:55
UTC ·
(1 year ago)
63.135.161.222 - - [31/Oct/2025:06:09:25 +0100]"GET /wp-content/plugins/WordPressCore/index.php HTTP/2.0" 301 0"http://neko.chat/wp-content/plugins/WordPressCore/index.php" neko.chat "Go-http-client/2.0""0.005" "0.004""New York" "US"
63.135.161.222 - ...
show more
63.135.161.222 - - [31/Oct/2025:06:09:25 +0100]"GET /wp-content/plugins/WordPressCore/index.php HTTP/2.0" 301 0"http://neko.chat/wp-content/plugins/WordPressCore/index.php" neko.chat "Go-http-client/2.0""0.005" "0.004""New York" "US"
63.135.161.222 - - [31/Oct/2025:06:09:41 +0100]"GET /wp-admin/css/colors/coffee/index.php HTTP/2.0" 301 0"http://neko.chat/wp-admin/css/colors/coffee/index.php" neko.chat "Go-http-client/2.0""0.005" "0.003""New York" "US"
63.135.161.222 - - [31/Oct/2025:06:09:52 +0100]"GET /wp-includes/certificates/index.php HTTP/2.0" 301 0"http://neko.chat/wp-includes/certificates/index.php" neko.chat "Go-http-client/2.0""0.004" "0.003""New York" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
artificialred.nl
2025-10-31 04:07:03
UTC ·
(1 year ago)
[Server probing] access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:32 +0100] GET /wp-admin/includes/about.php HTTP/1.0" 404 30508 "http://redacted-domain.com/wp-admin/includes/about.php" "Go-http-client/2.0" access_ssl_log:63.135.161.222 - - [31/O ...
show more
[Server probing] access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:32 +0100] GET /wp-admin/includes/about.php HTTP/1.0" 404 30508 "http://redacted-domain.com/wp-admin/includes/about.php" "Go-http-client/2.0" access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:35 +0100] "GET /wp-admin/images/wp-login.php HTTP/1.0" 404 30508 "http://redacted-domain.com/wp-admin/images/wp-login.php" "Go-http-client/2.0" proxy_access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:17 +0100] "GET /wp-includes/wp-class.php HTTP/2.0" 403 146 "http://redacted-domain.com/wp-includes/wp-class.php" "Go-http-client/2.0" proxy_access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:26 +0100] "GET /wp-includes/Requests/index.php HTTP/2.0" 403 146 "http://redacted-domain.com/wp-includes/Requests/index.php" "Go-http-client/2.0" proxy_access_ssl_log:63.135.161.222 - - [31/Oct/2025:05:06:34 +0100] "GET /wp-includes/themes.php HTTP/2.0" 403 146 "http://redacted-domain.com/wp-includes/themes.php" "Go-http-client/2.0" "
show less
Port Scan
Web App Attack
🇨🇭
Origon
2025-10-30 15:56:13
UTC ·
(1 year ago)
http-probing - IP: 63.135.161.222 - time="2025-10-30T16:56:13+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 63.135.161.222 (US/206092) : 4h ban on Ip 63.135.161.222"
Web App Attack
🇩🇪
neckaralb-admin.de
2025-10-30 13:37:59
UTC ·
(1 year ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇪🇸
masterguru
2025-10-30 12:31:10
UTC ·
(1 year ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
2025-10-29 02:38:11
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇳🇱
Site.eu
2025-10-28 12:26:43
UTC ·
(1 year ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
masterguru
2025-10-26 15:02:57
UTC ·
(1 year ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
🇺🇸
mnsf
2025-10-26 12:05:09
UTC ·
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack