🇩🇪
gurnip
2026-10-05 03:11:53
(1 week ago)
Vulnerability probe of page /wp-login.php, not found on the server.
Brute-Force
Web App Attack
🇨🇭
backslash
2026-10-05 01:06:00
(1 week ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇿
lp
2026-09-13 12:23:03
(4 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.92.131
2026-09-13T14:07:38+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.163.92.131
2026-09-13T14:07:38+02:00 vpn Access-Reject '25-400-3-02-1257' station: 193.163.92.131 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(4 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 14:36:00
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-03 22:05:29
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 18:05:25.371612 2026] [security2:error] [pid 812107:tid 812107] [client 193.163.92.131:62303] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||moellerlaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "moellerlaw.com"] [uri "/"] [unique_id "anEQpdai5jf-2998iT8dLAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 12:43:59
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:43:50.767665 2026] [security2:error] [pid 8166:tid 8166] [client 193.163.92.131:49193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelwithjenniferb.com"] [uri "/wp-config.php~"] [unique_id "ahBPhgoSxV0nz0J1Fqm-YAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 10:53:31
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:53:26.005256 2026] [security2:error] [pid 25124:tid 25124] [client 193.163.92.131:13119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dreamingthelife.brushmileage.org"] [uri "/wp-config.php.orig"] [unique_id "ahA1pvuOcmXg6oN6r5gMVwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-05-21 21:05:52
(4 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 19:24:14
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:24:05.763997 2026] [security2:error] [pid 20970:tid 20970] [client 193.163.92.131:22031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcga.golf"] [uri "/wp-config.php.old"] [unique_id "ag4KVXPgAn671669yema-wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 18:54:08
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:54:04.097903 2026] [security2:error] [pid 30428:tid 30428] [client 193.163.92.131:36505] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmelson.com"] [uri "/wp-config.php.old"] [unique_id "ag4DTHy7i30KlOKjrEiQRgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:54:33
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:54:28.993995 2026] [security2:error] [pid 27660:tid 27660] [client 193.163.92.131:51369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peacecampus.org"] [uri "/wp-config.php.save"] [unique_id "ag2vBBv7M2bTNkQLCL5TsAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 02:36:40
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 193.163.92.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 22:36:34.769436 2026] [security2:error] [pid 14085:tid 14085] [client 193.163.92.131:54397] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.denroydannursery.edgeimprov.com"] [uri "/wp-config.php~"] [unique_id "ag0eMssb3j0eJeyTTJzCxwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-05-17 21:47:07
(4 months ago)
193.163.92.131 - - [17/May/2026:23:47:05 +0200] "GET /wp-content/plugins/wordpress-seo/wordpress-seo ...
show more
193.163.92.131 - - [17/May/2026:23:47:05 +0200] "GET /wp-content/plugins/wordpress-seo/wordpress-seo.php HTTP/1.1" 404 53347 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-05-16 04:32:40
(4 months ago)
Many_bad_calls
Web App Attack
