🇺🇸
xmission.com
2026-05-03 04:52:19
(1 month ago)
Blocked by UFW (TCP on 34862)
Source port: 38851
TTL: 52
Packet length: 60
TOS: 0x08
This report (f ...
show more
Blocked by UFW (TCP on 34862)
Source port: 38851
TTL: 52
Packet length: 60
TOS: 0x08
This report (for 191.96.150.193) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
SpaceHost-Server
2026-03-12 02:17:33
(3 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2026-03-11 20:12:00
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2026-03-11 02:17:30
(3 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2026-03-10 20:11:59
(3 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
octageeks.com
2026-03-10 04:10:37
(3 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇩🇪
macrob
2026-03-10 03:20:18
(3 months ago)
2026/03/10 03:20:16 [error] 3581169#3581169: *64184782 access forbidden by rule, client: 191.96.150. ...
show more
2026/03/10 03:20:16 [error] 3581169#3581169: *64184782 access forbidden by rule, client: 191.96.150.193, server: bonocom.org, request: "GET /wp-includes/ID3/license.txt HTTP/1.1", host: "bonocom.org"
2026/03/10 03:20:17 [error] 3581169#3581169: *64184806 access forbidden by rule, client: 191.96.150.193, server: bonocom.org, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "bonocom.org"
2026/03/10 03:20:17 [error] 3581169#3581169: *64184779 access forbidden by rule, client: 191.96.150.193, server: bonocom.org, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "bonocom.org"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-03-10 03:07:20
(3 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇳🇱
Savvii
2026-03-10 02:59:27
(3 months ago)
10 attempts against mh-misc-ban on moon
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 02:56:00
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 22:55:54.101669 2026] [security2:error] [pid 6627:tid 6627] [client 191.96.150.193:49283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lesdaniels.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lesdaniels.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa-IOgwtrYVgjLQOgund4AAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 02:39:59
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 22:39:55.204580 2026] [security2:error] [pid 16120:tid 16142] [client 191.96.150.193:28199] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rockabyecotons.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rockabyecotons.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa-Ee8L3XOnwXmMtIh1RYwAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-03-10 02:15:17
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇬🇧
consul.to
2026-03-10 01:29:17
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 01:21:58
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 21:21:52.950675 2026] [security2:error] [pid 8371:tid 8371] [client 191.96.150.193:12032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||srsrestoration.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "srsrestoration.net"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aa9yMBY3pdCbDat-p3nB8QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 00:46:52
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 191.96.150.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 20:46:47.725874 2026] [security2:error] [pid 24478:tid 24478] [client 191.96.150.193:55962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ibermar.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibermar.info"] [uri "/wp-json/wp/v2/users/"] [unique_id "aa9p9-QxZsUnMi2iNesGkQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack