🇸🇮
administrator
2026-10-14 22:18:38
(6 hours ago)
2026-10-12 14:28:03,949 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 132.255.134.23 ...
show more
2026-10-12 14:28:03,949 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 132.255.134.232
2026-10-12 14:28:03,949 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 132.255.134.232
2026-10-12 14:28:03,949 fail2ban.actions [1080]: NOTICE [webadmin-badips] Ban 132.255.134.232
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 21:40:52
(7 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:40:48.044659 2026] [security2:error] [pid 14663:tid 14678] [client 132.255.134.232:39899] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgementz.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgementz.org"] [uri "/wp-json/wp/v2/users"] [unique_id "as_24Cv5u7rb6_JSB2Y0-gAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:28:59
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:28:52.837320 2026] [security2:error] [pid 18173:tid 18173] [client 132.255.134.232:40017] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fixitz.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fixitz.net"] [uri "/wp-json/wp/v2/users"] [unique_id "as9ZZIepvSuVSBO9_ax_qgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 07:55:46
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:55:42.979033 2026] [security2:error] [pid 20027:tid 20027] [client 132.255.134.232:59835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fetchamreadingroom.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fetchamreadingroom.org"] [uri "/wp-json/wp/v2/users"] [unique_id "as81fs25e5-OfACr8b6PBwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-14 07:02:19
(21 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇩🇪
maxpower
2026-10-14 01:12:12
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.232 (ID/Indonesia/-): 1 in the las ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 132.255.134.232 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 132.255.134.232 - - [14/Oct/2026:03:12:08 +0200] "GET /wp-json/wp/v2/users HTTP/1.1" 200 12089 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" host=eumanagement.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-13 21:28:39
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:28:33.677002 2026] [security2:error] [pid 8196:tid 8196] [client 132.255.134.232:41283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||enriquejezik.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "enriquejezik.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as6igZ_zJEk1uOl8w9FD6AAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 09:50:40
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:50:33.262968 2026] [security2:error] [pid 15456:tid 15456] [client 132.255.134.232:35109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drwolberg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drwolberg.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as3-6dlCdBx2M-2TCh1dtQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-12 19:19:32
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 16:49:27
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:49:20.157292 2026] [security2:error] [pid 1886:tid 1886] [client 132.255.134.232:55363] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cyqci.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cyqci.eu"] [uri "/wp-json/wp/v2/users"] [unique_id "as0PkEXSiv5sZiQORrj33gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-10-12 14:53:09
(2 days ago)
cloudlinux2 fail2ban: 2026-10-12 13:29:34,563 fail2ban.actions [1878]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-12 13:29:34,563 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Unban 103.171.65.65cloudlinux2 fail2ban: 2026-10-12 13:30:14,293 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 132.255.134.232 - 2026-10-12 13:30:14cloudlinux2 fail2ban: 2026-10-12 13:30:36,564 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 94.154.43.125 - 2026-10-12 13:30:36cloudlinux2 fail2ban: 2026-10-12 13:30:51,656 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 8.210.59.99 - 2026-10-12 13:30:50cloudlinux2 fail2ban: 2026-10-12 13:31:06,135 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 132.255.134.223 - 2026-10-12 13:31:06cloudlinux2 fail2ban: 2026-10-12 13:31:25,347 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Unban 34.179.196.206cloudlinux2 fail2ban: 2026-10-12 13:32:07,727 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 217.60.196.152 - 2026-10-12 13:32:07cloudlinux2 fail2ban: 2026-10-12 13:32:
show less
Web App Attack
2026-10-12 12:35:24
(2 days ago)
2026-10-12T12:35:23.560058+00:00 instance-20260804-1025 wordpress(acbp.org.co)[355414]: Immediately ...
show more
2026-10-12T12:35:23.560058+00:00 instance-20260804-1025 wordpress(acbp.org.co)[355414]: Immediately block connections from 132.255.134.232
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 10:09:09
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:09:04.033116 2026] [security2:error] [pid 24907:tid 24907] [client 132.255.134.232:49845] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||constructiondomex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "constructiondomex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asyxwOAnhp8iVM4z_ZUA3AAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 23:59:46
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 19:59:42.196910 2026] [security2:error] [pid 20917:tid 21043] [client 132.255.134.232:54041] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ccgparquitectos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ccgparquitectos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aswi7q8UFUWCon-c9MLFqQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 19:47:36
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 132.255.134.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 15:47:32.059438 2026] [security2:error] [pid 21491:tid 21491] [client 132.255.134.232:42749] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvaryadminservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvaryadminservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asvn1Hj1xbQqtCWOE7QA6QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
