🇺🇸
mnsf
2026-06-05 05:07:57
(3 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇬🇧
PeravixGroup
2026-05-08 12:07:39
(1 month ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
2026-04-21 02:12:57
(2 months ago)
"GET http://ffsync.bstnet.org/.svn/wc.db HTTP/1.1"
Hacking
Web App Attack
🇦🇺
RedBear IT
2026-03-26 10:00:37
(3 months ago)
"DDoS against public endpoint"
DDoS Attack
🇫🇷
tilellit.pro
2026-01-20 02:00:11
(5 months ago)
Fail2Ban banned 193.56.28.195 for security violations in jail wp-armour. Log: 2026/01/20 02:00:11 [e ...
show more
Fail2Ban banned 193.56.28.195 for security violations in jail wp-armour. Log: 2026/01/20 02:00:11 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.56.28.195 | Target: wplogin" , client: 193.56.28.195, server: [REDACTED], request: "POST /wp-login.php HTTP/2.0", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇮🇹
VHosting
2025-12-24 04:00:26
(6 months ago)
Detected attack and reported by a human
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-26 18:58:42
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 13:58:38.508752 2025] [security2:error] [pid 5472:tid 5472] [client 193.56.28.195:59917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.egret.us"] [uri "/.svn/wc.db"] [unique_id "aSdN3vfmVp8_6-zAIOjE4QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 07:00:53
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:00:46.461805 2025] [security2:error] [pid 21111:tid 21111] [client 193.56.28.195:17263] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trademarkexaminerscom.karenbernsteinlaw.net"] [uri "/.git/HEAD"] [unique_id "aSVUHqGh3j8OVdoXZtz5_QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:50:59
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:50:48.761390 2025] [security2:error] [pid 2368:tid 2368] [client 193.56.28.195:56663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.hometechllc.com"] [uri "/.svn/wc.db"] [unique_id "aSVDuPf6AxwYDQtZe0zOQQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:32:40
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:32:32.619601 2025] [security2:error] [pid 19495:tid 19495] [client 193.56.28.195:40585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.michaeltravis.com"] [uri "/.env"] [unique_id "aSU_cB4rrkpdTFUaZx8jxwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:54:18
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:54:11.352090 2025] [security2:error] [pid 6578:tid 6578] [client 193.56.28.195:18351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.brodericktourville.com"] [uri "/.svn/wc.db"] [unique_id "aSU2cy-k0HQLc1bOGv7sYgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 04:23:25
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:23:19.038260 2025] [security2:error] [pid 11481:tid 11481] [client 193.56.28.195:49911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.clarktec.com"] [uri "/.env"] [unique_id "aSUvN_hCvmCdhDqdsEFt8QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:59:02
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:58:57.292062 2025] [security2:error] [pid 3379:tid 3379] [client 193.56.28.195:18927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.loupgaroubooks.com"] [uri "/.env"] [unique_id "aSUpge18sj7eBR76jm0D5AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:43:31
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:43:22.240504 2025] [security2:error] [pid 746518:tid 746518] [client 193.56.28.195:46135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wilburmanagementgroup.com"] [uri "/.git/HEAD"] [unique_id "aSUl2gOE7ZL2JDkEtlPjiAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:01:57
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.56.28.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:01:50.090556 2025] [security2:error] [pid 17023:tid 17071] [client 193.56.28.195:15141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "test.giere.us"] [uri "/.git/HEAD"] [unique_id "aSUcHr1hG8E8_fObGRh5eAAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack