🇬🇧
SilverZippo
2026-05-26 16:49:00
(4 weeks ago)
Web App Attack
Web App Attack
🇫🇷
tilellit.pro
2026-05-19 04:27:12
(1 month ago)
Fail2Ban banned 193.163.92.50 for security violations in jail wp-armour. Log: 2026/05/19 04:27:11 [e ...
show more
Fail2Ban banned 193.163.92.50 for security violations in jail wp-armour. Log: 2026/05/19 04:27:11 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.163.92.50 | Target: wplogin" , client: 193.163.92.50, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "http://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇮🇩
Burayot
2026-05-14 04:08:44
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.163.92.50 (US/United States/-): ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.163.92.50 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 05:02:00
(1 month ago)
(mod_security) mod_security (id:210831) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210831) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 01:01:54.682755 2026] [security2:error] [pid 17472:tid 17472] [client 193.163.92.50:52843] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.customersupport.alitcogroup.com|F|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.customersupport.alitcogroup.com"] [uri "/s3cmd.ini"] [unique_id "afA_Qv_5aEryf1Oe_lGdXAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-04-27 05:13:38
(1 month ago)
[MonApr2707:13:36.1767502026][security2:error][pid2168597:tid2168693][client193.163.92.50:0]ModSecur ...
show more
[MonApr2707:13:36.1767502026][security2:error][pid2168597:tid2168693][client193.163.92.50:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"342\"][id\"397989\"][rev\"1\"][msg\"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)\"][severity\"WARNING\"][hostname\"swiss-web-hosting-ch.hostingedominio.net\"][uri\"/\"][unique_id\"ae7wgI2DGvtw8-8Qa1ZNpgAAARA\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-16 01:37:40
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:37:27.509866 2026] [security2:error] [pid 2247777:tid 2247777] [client 193.163.92.50:56601] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Charles II/Thumbs.db"] [unique_id "aeA9V2FpWhcGP38Q2SRPQwAAAAE"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Charles%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-04-15 19:27:00
(2 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-14 10:27:14
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:27:07.257944 2026] [security2:error] [pid 24729:tid 24729] [client 193.163.92.50:18725] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Colors/Thumbs.db"] [unique_id "abU3-3cYK_XaKLagIVH4uAAAABI"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Colors/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-11 13:27:00
(3 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-19 06:58:03
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.163.92.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 01:57:58.851582 2026] [security2:error] [pid 13417:tid 13525] [client 193.163.92.50:56173] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ORTHOPEDICA.ORG|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "orthopedica.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aW3V9hViRXlZ0XLN7RfQnQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Bytemark
2026-01-11 11:58:46
(5 months ago)
193.163.92.50 - - [11/Jan/2026:11:58:45 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.goog ...
show more
193.163.92.50 - - [11/Jan/2026:11:58:45 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.163.92.50 - - [11/Jan/2026:11:58:46 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
193.163.92.50 - - [11/Jan/2026:11:58:46 +0000] "GET /wp-login.php HTTP/1.1" 404 47 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇩🇪
HandyTreff.de
2025-12-05 16:14:07
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.333 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.333 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3131.3
show less
Bad Web Bot
Web App Attack
🇺🇸
oncord
2025-05-24 02:08:29
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-04-29 09:44:57
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-03-22 18:18:45
(1 year ago)
Form spam
Web Spam