🇮🇹
Progetto1
2026-06-26 07:55:03
(2 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-19 18:05:40
(2 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 18:52:38
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 14:52:33.070465 2026] [security2:error] [pid 18161:tid 18161] [client 91.132.198.206:46597] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||now-app.space|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "now-app.space"] [uri "/wp-json/wp/v2/users"] [unique_id "ai74cURPMIDzIadLcbNNDgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 16:44:09
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:44:04.434332 2026] [security2:error] [pid 27502:tid 27502] [client 91.132.198.206:46949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gwenwaltersartrep.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gwenwaltersartrep.com"] [uri "/wp-json/wp/v2/users"] [unique_id "airl1NdLUPPuRbH2mH4KzwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 19:26:49
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:26:44.290621 2026] [security2:error] [pid 2450:tid 2450] [client 91.132.198.206:35531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||demberdatabase.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "demberdatabase.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aim6dGcvp0Q-JzDG7-0dAgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-06-05 19:15:04
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-06-02 02:37:00
(3 months ago)
Forum/form spam
Web Spam
🇫🇷
Tilellit.PRO
2026-02-06 18:09:27
(7 months ago)
Fail2Ban banned 91.132.198.206 for security violations in jail wp-armour. Log: 2026/02/06 18:09:27 [ ...
show more
Fail2Ban banned 91.132.198.206 for security violations in jail wp-armour. Log: 2026/02/06 18:09:27 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 91.132.198.206 | Target: wplogin" , client: 91.132.198.206, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇪🇸
el-brujo
2025-12-15 06:36:14
(8 months ago)
[Mon Dec 15 07:36:11.656110 2025] [proxy_fcgi:error] [pid 1388823:tid 1389516] [remote 91.132.198.20 ...
show more
[Mon Dec 15 07:36:11.656110 2025] [proxy_fcgi:error] [pid 1388823:tid 1389516] [remote 91.132.198.206:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
[Mon Dec 15 07:36:13.686626 2025] [proxy_fcgi:error] [pid 1388820:tid 1389255] [remote 91.132.198.206:0] AH01071: Got error 'Primary script unknown\n', referer: https://www.google.com
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 05:53:59
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 91.132.198.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 00:53:53.674794 2025] [security2:error] [pid 21764:tid 21764] [client 91.132.198.206:13855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sawmat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sawmat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aT-icfSVSg5wvV68Bns_rAAAABs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-12-09 22:25:02
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot