🇺🇸
island-freaks.com
2026-10-06 12:10:40
(2 weeks ago)
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 193.203.9.163 | Agent: Mozilla/5. ...
show more
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 193.203.9.163 | Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
NxtGenIT
2026-09-10 12:25:17
(1 month ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html HTTP/1.1" 302 -,
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 11:58:17
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇳🇱
i-turnradio.nl
2026-08-15 18:36:24
(2 months ago)
2026-08-15 @ 20:36:24 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php
Web App Attack
2026-07-24 04:16:59
(2 months ago)
[osotir.org] httpd-login-spray-site: sites=www.synathlountes.agonistes.gr; logs=/var/log/httpd/domai ...
show more
[osotir.org] httpd-login-spray-site: sites=www.synathlountes.agonistes.gr; logs=/var/log/httpd/domains/agonistes.gr.synathlountes.log; samples=site_wide=true | distinct_ips=51 | /wp-login.php
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 00:28:31
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 20:28:24.207077 2026] [security2:error] [pid 23325:tid 23325] [client 193.203.9.163:15147] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "alGOKAOWPgSO-n9KLC6rzwAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-28 07:21:29
(3 months ago)
Fail2Ban banned 193.203.9.163 for security violations in jail wp-armour. Log: 2026/06/28 07:21:29 [e ...
show more
Fail2Ban banned 193.203.9.163 for security violations in jail wp-armour. Log: 2026/06/28 07:21:29 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.203.9.163 | Target: wplogin" , client: 193.203.9.163, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Lunix
2026-06-25 19:13:22
(3 months ago)
SQL Injection
Brute-Force
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-25 18:32:26
(3 months ago)
Fail2Ban banned 193.203.9.163 for security violations in jail wp-armour. Log: 2026/06/25 18:32:25 [e ...
show more
Fail2Ban banned 193.203.9.163 for security violations in jail wp-armour. Log: 2026/06/25 18:32:25 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.203.9.163 | Target: wplogin" , client: 193.203.9.163, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-06-24 19:30:16
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:30:12.708794 2026] [security2:error] [pid 20666:tid 20666] [client 193.203.9.163:48957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lbee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lbee.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajwwRKkgxRh4AS4vPq7hJgAAABs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 10:26:13
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 06:26:06.159363 2026] [security2:error] [pid 14791:tid 14791] [client 193.203.9.163:57077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||travelingguitarfoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "travelingguitarfoundation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ajkNvsvNf1hM3IyRn51FGgAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
stechusa
2026-05-06 13:52:09
(5 months ago)
[Askari] | country=IL | Behavior: Concurrent page load during attack, No referrer on deep pages, HTT ...
show more
[Askari] | country=IL | Behavior: Concurrent page load during attack, No referrer on deep pages, HTTP/1.1 over TLS, Targeting specific pages
show less
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-05-06 13:52:09
(5 months ago)
ELEVATED_THREAT | country=IL | ASN=PureVoltage Hosting Inc. | 16 IPs targeting /brand/hatch-transfor ...
show more
ELEVATED_THREAT | country=IL | ASN=PureVoltage Hosting Inc. | 16 IPs targeting /brand/hatch-transformers/transformers.html | Facet request during elevated threat (facet_ratio=0.95, unique_ips=127) | HTTP/1.1 over TLS (elevated=True)
show less
Bad Web Bot
DDoS Attack
🇺🇸
TPI-Abuse
2026-03-28 18:35:06
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 14:34:58.716788 2026] [security2:error] [pid 20674:tid 20674] [client 193.203.9.163:33567] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mitchellart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mitchellart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acgfUpP6Gj9LTHW5_IeqegAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
