This IP address has been reported a total of
3
times from
2 distinct
sources.
94.76.159.178 was first reported on
July 24th 2026 , and the most recent report was
4 hours ago .
In the last 60 days, the only reporter location was:
Brazil
with 2
reports.
The only category in these recent reports was:
Bad Web Bot
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ง๐ท
Peregrine
2026-10-08 03:18:45
(4 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 94.76.159.178 162.158.122.63 - - [06/Oct/2026:16:04 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 94.76.159.178 162.158.122.63 - - [06/Oct/2026:16:04:55 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-06 19:04:58
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 94.76.159.178 162.158.122.63 - - [06/Oct/2026:16:04 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 94.76.159.178 162.158.122.63 - - [06/Oct/2026:16:04:55 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-24 22:45:31
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 94.76.159.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 94.76.159.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:45:27.746523 2026] [security2:error] [pid 9070:tid 9070] [client 94.76.159.178:19223] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||n3fjp.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "n3fjp.com"] [uri "/wp.sql"] [unique_id "amPrBzrL9i173Ws7t58DDQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
3
of 3 reports