🇺🇸
TPI-Abuse
2026-10-07 21:43:25
(14 hours ago)
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:43:16.741458 2026] [security2:error] [pid 8409:tid 8409] [client 193.31.126.86:16059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||protonmultimedia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "protonmultimedia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asa89EbfNXuL73UtmPgbygAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 10:34:09
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 06:34:02.820741 2026] [security2:error] [pid 28710:tid 28710] [client 193.31.126.86:42643] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clowaterart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clowaterart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asIrmhYmfWa4ZTYb1xkxPAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 03:10:39
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 23:10:35.814341 2026] [security2:error] [pid 4437:tid 4437] [client 193.31.126.86:33405] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mathewsdental.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mathewsdental.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asHDq5DsMVE_H_sHwGW4HgAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-04 00:55:41
(4 days ago)
Web application attack detected.
Web App Attack
🇪🇸
librebit
2026-09-24 00:43:23
(2 weeks ago)
Brute force
Brute-Force
🇨🇿
Countryman
2026-09-15 00:10:01
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-14 00:10:01
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-12 01:51:40
(3 weeks ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.31.126.86
2026-09-12T02:17:51+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.31.126.86
2026-09-12T02:17:51+02:00 vpn Access-Reject 'cn=administrator,cn=users,dc=ptngroup,dc=local' station: 193.31.126.86 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-07 09:56:57
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-01 10:01:59
(1 month ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-07-26 13:12:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-26 04:05:22
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 00:05:15.736870 2026] [security2:error] [pid 2463559:tid 2463559] [client 193.31.126.86:21205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ibcnu.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ibcnu.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amWHe93EKSaQS_MSwxgODgAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-21 07:08:56
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
bazter.pro
2026-03-21 22:11:56
(6 months ago)
Auto-Ban [2026-03-22 00:11:53]: CRITICAL: Sensitive files (2) [Paths: 2] | Details: Sensitive files/ ...
show more
Auto-Ban [2026-03-22 00:11:53]: CRITICAL: Sensitive files (2) [Paths: 2] | Details: Sensitive files/paths: /xmlrpc.php, /xmlrpc.php | Other paths: /wp-login.php, /xmlrpc.php
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-03-12 16:28:51
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.31.126.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 12:28:47.963963 2026] [security2:error] [pid 28198:tid 28198] [client 193.31.126.86:17421] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||intermixx.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "intermixx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abLpv6mvEKV1Rbsx4FdLUgAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
