|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:16:48.637909 2026] [security2:error] [pid 24830:tid 24830] [client 193.56.20.56:38305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cityofportales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cityofportales.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailHoL8QIV_Mx6FMogNHjQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 05:52:02.515525 2026] [security2:error] [pid 27527:tid 27527] [client 193.56.20.56:53523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||solutiongroove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "solutiongroove.com"] [uri "/"] [unique_id "abUvwroig2xAuZuFHvthggAAAAk"], referer: https://www.facebook.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 15:27:14.018790 2026] [security2:error] [pid 9936:tid 9936] [client 193.56.20.56:44245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rkhindustries.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rkhindustries.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaH-IvmS-5UdifhJShFMjwAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:32:26.020556 2026] [security2:error] [pid 19459:tid 19459] [client 193.56.20.56:59157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abilityimprinting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abilityimprinting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZy5WpPuO1XdeMrp5MDK0gAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
Packets-Decreaser.NET
|
|
Incoming Layer 7 Flood Detected
|
DDoS Attack
Web Spam
|
|
|
🇺🇸
fbarela
|
|
FortiGate SSL VPN login failures.
|
Hacking
Brute-Force
|
|
|
🇩🇪
ps-center
|
|
MYH: Web Attack GET /index.php/adminpanel/adminhtml_login/index
|
Web Spam
Hacking
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
|
Bad Web Bot
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 193.56.20.56
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 193.56.20.56
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 193.56.20.56
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.20.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 16 18:51:52.125682 2025] [security2:error] [pid 2159145:tid 2159145] [client 193.56.20.56:29061] [client 193.56.20.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engravingbyangela.com"] [uri "/wp-config.php.3"] [unique_id "Z4mbmJFaxKxnAdFSR5lj0wAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇦
wil.com
|
|
GlobalProtect login attempts with user public.
|
VPN IP
Brute-Force
|
|
|
🇩🇪
css672
|
|
Credential brute-force attacks on webpage logins [18,21].
remote_addr: 193.56.20.56, error_code: 76
...
show more
Credential brute-force attacks on webpage logins [18,21].
remote_addr: 193.56.20.56, error_code: 76
username: annashevchuk12ukr-net
password: [censored]
fruad_score: 0, abuseConfidenceScore: 0
css672: V.4.10.16.1436
show less
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
Sklurk
|
|
|
Web App Attack
|
|