🇨🇿
ptlab
2026-06-29 08:45:20
(12 hours ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 00:13:28
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 20:13:23.409200 2026] [security2:error] [pid 805:tid 805] [client 193.151.189.100:13299] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stardancertantra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stardancertantra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akG4o5KMLCIS4w30tK4BDgAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tilellit.pro
2026-06-28 08:31:48
(1 day ago)
Fail2Ban banned 193.151.189.100 for security violations in jail wp-armour. Log: 2026/06/28 08:31:48 ...
show more
Fail2Ban banned 193.151.189.100 for security violations in jail wp-armour. Log: 2026/06/28 08:31:48 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.151.189.100 | Target: wplogin" , client: 193.151.189.100, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-27 05:26:36
(2 days ago)
Fail2Ban banned 193.151.189.100 for security violations in jail wp-armour. Log: 2026/06/27 05:26:36 ...
show more
Fail2Ban banned 193.151.189.100 for security violations in jail wp-armour. Log: 2026/06/27 05:26:36 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.151.189.100 | Target: wplogin" , client: 193.151.189.100, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-27 01:26:32
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:26:26.876652 2026] [security2:error] [pid 25184:tid 25184] [client 193.151.189.100:45281] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||geceindia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "geceindia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aj8mwjVdfHgUS0E-4g-_QAAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 06:12:06
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 02:11:59.147073 2026] [security2:error] [pid 18637:tid 18637] [client 193.151.189.100:10387] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||baughman.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "baughman.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajt1L45jiDmUSdN3Ju1MOgAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-06-13 20:53:38
(2 weeks ago)
193.151.189.100 - - [13/Jun/2026:22:53:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5 ...
show more
193.151.189.100 - - [13/Jun/2026:22:53:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 (Linux; Android 9; arm_64; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 YaBrowser/20.7.2.70.00 SA/1 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
RasyiidWho
2026-03-31 04:16:57
(2 months ago)
ip112.20 . 193.151.189.100 - - [31/Mar/2026:11:16:56 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" ...
show more
ip112.20 . 193.151.189.100 - - [31/Mar/2026:11:16:56 +0700] "POST /xmlrpc.php HTTP/1.1" 401 172 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
...
show less
DDoS Attack
Brute-Force
Port Scan
Bad Web Bot
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-03-29 05:44:10
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 01:44:02.414485 2026] [security2:error] [pid 31974:tid 31974] [client 193.151.189.100:48351] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||carra.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "carra.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aci8ItzshqTRjtx4Tu6hygAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 02:32:45
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 22:32:38.823117 2026] [security2:error] [pid 16191:tid 16191] [client 193.151.189.100:44855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maffiniandbearce.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maffiniandbearce.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acc9xlpPM6gD2Gb-eYP6FwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
www.winos.me
2026-03-01 17:28:02
(3 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 21:22:10
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 16:22:03.695738 2026] [security2:error] [pid 23978:tid 23978] [client 193.151.189.100:56021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nwuoregon.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nwuoregon.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aXKU-zMQ0nlS9RUK6kidrwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-01-22 16:37:33
(5 months ago)
Wordpress attack: user enumeration attempt detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 13:25:20
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 08:25:15.607203 2026] [security2:error] [pid 13189:tid 13189] [client 193.151.189.100:24543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cm-salon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cm-salon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIlO7Dkyv2PpzvCU4JQ9QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
mgarofano80
2026-01-21 20:00:04
(5 months ago)
Brute-Force
Web App Attack