🇫🇷
tilellit.pro
2026-05-31 16:53:02
(4 days ago)
Fail2Ban banned 46.203.157.237 for security violations in jail wp-armour. Log: 2026/05/31 16:53:01 [ ...
show more
Fail2Ban banned 46.203.157.237 for security violations in jail wp-armour. Log: 2026/05/31 16:53:01 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 46.203.157.237 | Target: wplogin" , client: 46.203.157.237, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-01-17 05:35:51
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 00:35:44.817684 2026] [security2:error] [pid 25780:tid 25780] [client 46.203.157.237:58425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/.htaccess"] [unique_id "aWsfsIJ_hHMl2gxYhpygtAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 17:13:32
(5 months ago)
(mod_security) mod_security (id:211190) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:09:38.094211 2025] [security2:error] [pid 12847:tid 12917] [client 46.203.157.237:39195] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||kettlehill.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.com"] [uri "/solr/solrdefault/debug/dump"] [unique_id "aVK10qLrABXCW5a44Sq4LAAAAYI"], referer: http://kettlehill.com/solr/solrdefault/debug/dump?param=ContentStreams&stream.url=file:///etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-13 20:58:47
(6 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-11-13 12:18:49
(6 months ago)
(mod_security) mod_security (id:211190) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 07:18:46.390607 2025] [security2:error] [pid 14483:tid 14483] [client 46.203.157.237:33123] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||ftp.nbcnewsradio.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /maint/modules/home/index.php?lang=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00english"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/maint/modules/home/index.php"] [unique_id "aRXMppJKkcfcGrwYlmH8uQAAABg"], referer: ftp.nbcnewsradio.com/maint/index.php?packages
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 18:11:43
(7 months ago)
(mod_security) mod_security (id:243930) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:243930) triggered by 46.203.157.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 14:11:39.917401 2025] [security2:error] [pid 15546:tid 15546] [client 46.203.157.237:53715] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)||www.davispickering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.davispickering.com"] [uri "/"] [unique_id "aQJY20Qt_CcaASGZrQ_lsQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-10 15:00:05
(7 months ago)
| SQL injection attempt.
Hacking
SQL Injection
Web App Attack