🇫🇷
tilellit.pro
2026-06-27 05:29:54
(1 day ago)
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/06/27 05:29:54 ...
show more
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/06/27 05:29:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.151.188.128 | Target: wplogin" , client: 193.151.188.128, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-25 01:18:21
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 21:18:17.457171 2026] [security2:error] [pid 5090:tid 5093] [client 193.151.188.128:27015] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||marinkovich.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "marinkovich.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajyB2br59p0sk4Bg_XCLcAAAAIE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-05-21 07:37:24
(1 month ago)
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/05/21 07:37:24 ...
show more
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/05/21 07:37:24 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.151.188.128 | Target: wplogin" , client: 193.151.188.128, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-05-07 20:19:44
(1 month ago)
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/05/07 20:19:43 ...
show more
Fail2Ban banned 193.151.188.128 for security violations in jail wp-armour. Log: 2026/05/07 20:19:43 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.151.188.128 | Target: wplogin" , client: 193.151.188.128, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
4server
2026-04-22 02:04:13
(2 months ago)
[WedApr2204:04:07.2286252026][security2:error][pid3974766:tid3974784][client193.151.188.128:0]ModSec ...
show more
[WedApr2204:04:07.2286252026][security2:error][pid3974766:tid3974784][client193.151.188.128:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.restaurantgandria.ch\"][uri\"/xmlrpc.php\"][unique_id\"aegslxPVbXEG_OuEa2fTHAAAAQ4\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-13 01:26:38
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 12 20:26:30.106905 2025] [security2:error] [pid 5685:tid 5685] [client 193.151.188.128:43123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kingstoneproperties.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected] "] [unique_id "aTzAxlOi_K4GYx7venbybAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-24 11:16:39
(9 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-03-08 03:51:05
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 193.151.188.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 22:50:56.641991 2025] [security2:error] [pid 4622:tid 4622] [client 193.151.188.128:53679] [client 193.151.188.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.net"] [uri "/.env"] [unique_id "Z8u-oFY_XCcxvke6wZULuAAAABY"], referer: https://tasamm.com/about/ggg236.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-27 18:35:05
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
MrDD
2024-07-09 18:19:09
(1 year ago)
Brute Force on Cisco Web VPN
Brute-Force
🇩🇪
Packets-Decreaser.NET
2024-02-01 01:15:09
(2 years ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇵🇱
TI
2023-10-28 10:21:41
(2 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot