🇪🇸
librebit
2026-08-28 18:15:31
(4 days ago)
Brute force
Brute-Force
🇮🇩
zam
2026-08-28 14:37:04
(4 days ago)
193.151.189.111 - - [28/Aug/2026:14:37:02 +0000] "POST /xmlrpc.php HTTP/1.1" 403 239
Web App Attack
🇪🇸
librebit
2026-08-20 08:45:50
(1 week ago)
Brute force
Brute-Force
🇨🇦
DRI
2026-07-28 13:41:46
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 17:10:19
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 13:10:11.678538 2026] [security2:error] [pid 21851:tid 21851] [client 193.151.189.111:53721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amY_c46NjtW0tv9-aBR5-gAAACA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-21 14:27:11
(1 month ago)
193.151.189.111 - - [21/Jul/2026:16:27:09 +0200] "GET /wp-login.php HTTP/1.1" 404 178 "https://www.g ...
show more
193.151.189.111 - - [21/Jul/2026:16:27:09 +0200] "GET /wp-login.php HTTP/1.1" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.151.189.111 - - [21/Jul/2026:16:27:10 +0200] "GET /wp-login.php HTTP/1.1" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇨🇦
DRI
2026-07-19 05:57:57
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 12:09:37
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:09:33.308868 2026] [security2:error] [pid 13821:tid 13830] [client 193.151.189.111:43709] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cmykdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cmykdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alIyfaxgnCQmzIxhfmLduwAAAQc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-03-30 04:12:06
(5 months ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
🇺🇸
TPI-Abuse
2026-03-29 07:47:29
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 03:47:22.344327 2026] [security2:error] [pid 18506:tid 18506] [client 193.151.189.111:31285] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andrsn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andrsn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acjZCvCKHkaCB7MpLqiHawAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 12:38:45
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 08:38:38.310643 2026] [security2:error] [pid 24864:tid 24864] [client 193.151.189.111:27049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ablLTpd_Q_mJn1_1emnYEQAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 22:17:27
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.151.189.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 18:17:22.856353 2026] [security2:error] [pid 14310:tid 14310] [client 193.151.189.111:27729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||imagineyourphotos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "imagineyourphotos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abiBcn5OLLLYYxVPMgirzQAAAEg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-08-01 19:52:03
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 193.151.189.111
2025-08-01T21:19:40+0 ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 193.151.189.111
2025-08-01T21:19:40+02:00 vpn Access-Reject 'landerson' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-08-01T21:37:54+02:00 vpn Access-Reject 'gwalker' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-07-24 19:50:09
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.151.189.111
2025-07-24T21:00:38+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.151.189.111
2025-07-24T21:00:38+02:00 vpn Access-Reject 'deagol' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-07-18 16:51:07
(1 year ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 193.151.189.111
2025-07-18T17:33:42+0 ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 193.151.189.111
2025-07-18T17:33:42+02:00 vpn Access-Reject 'administrator' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-18T17:53:22+02:00 vpn Access-Reject 'admin' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-18T18:00:16+02:00 vpn Access-Reject 'admin' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-07-18T18:00:52+02:00 vpn Access-Reject 'admin' station: 193.151.189.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack