🇺🇸
TPI-Abuse
2026-08-24 22:34:58
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 18:34:51.915187 2026] [security2:error] [pid 32649:tid 32649] [client 155.212.37.164:10045] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hodges-web.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hodges-web.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aozHC7z7tgcn69_Gd5bsCAAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-24 18:06:17
(4 days ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-08-21 03:57:15
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 23:57:11.768565 2026] [security2:error] [pid 32306:tid 32306] [client 155.212.37.164:55271] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aofMl5VjoZjwG6XRqcSYewAAACk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-08-20 16:29:10
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-11 10:57:46
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 06:57:40.313933 2026] [security2:error] [pid 2215805:tid 2215805] [client 155.212.37.164:42391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bendersite.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bendersite.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ansAJKxNhmuEWvtEoQfFYwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-05 02:28:53
(3 weeks ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 06:22:47
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 02:22:43.300257 2026] [security2:error] [pid 324087:tid 324108] [client 155.212.37.164:32205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bortec-corp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bortec-corp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amrtszV-k3EtPyuf4r3gaQAAAVI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-05 04:00:49
(1 month ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇫🇷
Tilellit.PRO
2026-07-02 05:08:36
(1 month ago)
tilellit/wp-armour-ban
Hacking
🇫🇷
Tilellit.PRO
2026-06-28 08:46:23
(2 months ago)
Fail2Ban banned 155.212.37.164 for security violations in jail wp-armour. Log: 2026/06/28 08:46:22 [ ...
show more
Fail2Ban banned 155.212.37.164 for security violations in jail wp-armour. Log: 2026/06/28 08:46:22 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 155.212.37.164 | Target: wplogin" , client: 155.212.37.164, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
masterguru
2026-06-11 01:16:53
(2 months ago)
(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.37.164 (NL/The Netherlands/ ...
show more
(modsec_2000110) ModSec 2000110: Malicious username admlnlx from 155.212.37.164 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇫🇷
masterguru
2026-05-28 17:27:07
(3 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.37.164 (NL/The Netherlands/-): 1 in th ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.37.164 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇪🇸
10dencehispahard SL
2026-01-28 05:48:57
(7 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇫🇷
masterguru
2026-01-16 12:24:09
(7 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.37.164 (NL/The Netherlands/-): 1 in th ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 155.212.37.164 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇬🇧
relianoid.com
2026-01-07 16:38:46
(7 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam