๐บ๐ธ
TPI-Abuse
2026-10-04 11:14:38
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:14:30.487029 2026] [security2:error] [pid 19023:tid 19023] [client 193.163.207.202:60471] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Abigail/Thumbs.db"] [unique_id "asI1FiVVaEJJgi_ilgfmnQAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Abigail/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฟ
Countryman
2026-09-15 00:10:01
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐จ๐ฟ
Countryman
2026-09-14 00:10:01
(4 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
๐จ๐ฟ
lp
2026-09-13 04:50:14
(4 weeks ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 193.163.207.202
2026-09-13T06:09:01+0 ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 193.163.207.202
2026-09-13T06:09:01+02:00 vpn Access-Reject 'codex' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T06:11:38+02:00 vpn Access-Reject 'cobranza' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T06:17:17+02:00 vpn Access-Reject 'armazem' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T06:20:01+02:00 vpn Access-Reject 'it' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T06:22:20+02:00 vpn Access-Reject 'yaghout' station: 193.163.207.202 auth-type: - realm: vse.cz nas:
show less
Brute-Force
Web App Attack
๐ธ๐ช
OnTheEdge
2026-09-09 01:32:16
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 00:41:51
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:41:44.652051 2026] [security2:error] [pid 1857573:tid 1857573] [client 193.163.207.202:27159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Barclay/Thumbs.db"] [unique_id "amFjSOEaJBhiBlu2dug_fQAAAAY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Barclay/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-05-17 22:42:00
(4 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-05-16 21:51:24
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.207.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 17:51:18.241227 2026] [security2:error] [pid 10538:tid 10538] [client 193.163.207.202:12385] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/HumanTouch/pics/Thumbs.db"] [unique_id "agjm1sXXWydcUtrhk_VlsAAAAAI"], referer: https://vitalitywebb.com/backstore/HumanTouch/pics/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-04-21 12:41:14
(5 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
๐จ๐ญ
backslash
2026-04-16 14:33:00
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐ฉ๐ช
LRob
2026-04-09 15:15:04
(6 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
Anonymous
2026-01-04 22:42:18
(9 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
2025-12-04 07:40:04
(10 months ago)
Forum/form spam
Web Spam
๐จ๐ฟ
lp
2024-10-31 05:54:09
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.207.202
2024-10-31T06:44:18+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.207.202
2024-10-31T06:44:18+01:00 vpn Access-Reject 'wes' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
๐จ๐ฟ
lp
2024-10-30 13:29:22
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.207.202
2024-10-30T13:13:13+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.207.202
2024-10-30T13:13:13+01:00 vpn Access-Reject 'wayne' station: 193.163.207.202 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack