🇺🇸
TPI-Abuse
2026-10-28 17:59:43
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:59:37.239418 2026] [security2:error] [pid 23334:tid 23334] [client 193.202.87.63:57999] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:59:37.239418 2026] [security2:error] [pid 23334:tid 23334] [client 193.202.87.63:57999] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||whiteblackbird.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whiteblackbird.com"] [uri "/about_us.html"] [unique_id "auI4CREAxjnL57zgRwjC0QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 12:59:47
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:59:41.916955 2026] [security2:error] [pid 29783:tid 29805] [client 193.202.87.63:20017] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 08:59:41.916955 2026] [security2:error] [pid 29783:tid 29805] [client 193.202.87.63:20017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chronotar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chronotar.com"] [uri "/manx/sxft/ce2.htm"] [unique_id "auHxvWsEAbHJBHp2Mlk4uAAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:11:28
(3 weeks ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-12 04:51:18
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.87.63
2026-09-12T06:33:17+02:00 vpn Access-Reject 'vpn' station: 193.202.87.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
Ilop
2026-09-10 09:30:07
(1 month ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇨🇿
lp
2026-09-10 09:22:27
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.87.63
2026-09-10T09:46:06+02:00 vpn Access-Reject 'penny' station: 193.202.87.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.87.63
2026-09-10T09:46:06+02:00 vpn Access-Reject 'penny' station: 193.202.87.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 17:15:20
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 09:53:30
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:53:24.527714 2026] [security2:error] [pid 14494:tid 14494] [client 193.202.87.63:63071] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:53:24.527714 2026] [security2:error] [pid 14494:tid 14494] [client 193.202.87.63:63071] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mrbaystreet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mrbaystreet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_LlB5DAUZN9RiMPMVWuwAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 20:44:58
(4 months ago)
WordPress login attempt
Brute-Force
2026-06-05 20:57:58
(4 months ago)
(caddyscan) Scanner path probe from 193.202.87.63 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:46 +0000] "POST /xmlrpc.php HTTP/1. ...
show more
(caddyscan) Scanner path probe from 193.202.87.63 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:46 +0000] "POST /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:48 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:49 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:53 +0000] "POST /xmlrpc.php HTTP/1.1"
[REDACTED] 200 2627 193.202.87.63 - - [05/Jun/2026:20:57:54 +0000] "GET /wp-login.php HTTP/1.1"
show less
Port Scan
🇺🇸
TPI-Abuse
2026-05-30 15:41:00
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 11:40:55.019691 2026] [security2:error] [pid 3879:tid 3879] [client 193.202.87.63:29385] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 11:40:55.019691 2026] [security2:error] [pid 3879:tid 3879] [client 193.202.87.63:29385] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hinelaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hinelaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahsFB5jrAg5IoZrLBDxqXAAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 08:10:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 04:10:20.922496 2026] [security2:error] [pid 5781:tid 5781] [client 193.202.87.63:21691] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 04:10:20.922496 2026] [security2:error] [pid 5781:tid 5781] [client 193.202.87.63:21691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||desimon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "desimon.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aham7HOTjj2FPuU9TTmQVAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-03-26 01:48:21
(7 months ago)
WordPress login attempt
Brute-Force
