🇫🇷
tilellit.pro
2026-06-29 13:49:06
(4 days ago)
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/29 13:49:06 [e ...
show more
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/29 13:49:06 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 155.212.39.32 | Target: wplogin" , client: 155.212.39.32, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-28 08:59:31
(5 days ago)
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/28 08:59:31 [e ...
show more
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/28 08:59:31 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 155.212.39.32 | Target: wplogin" , client: 155.212.39.32, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
tilellit.pro
2026-06-27 12:02:14
(6 days ago)
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/27 12:02:14 [e ...
show more
Fail2Ban banned 155.212.39.32 for security violations in jail wp-armour. Log: 2026/06/27 12:02:14 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 155.212.39.32 | Target: wplogin" , client: 155.212.39.32, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
dynamix
2026-06-15 22:55:57
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 17:19:54
(2 weeks ago)
WordPress login attempt
Brute-Force
2026-06-14 15:09:01
(2 weeks ago)
FPROCO WEBEXPLOIT 155.212.39.32 (155.212.39.32)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:07:18
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:07:14.065360 2026] [security2:error] [pid 19792:tid 19792] [client 155.212.39.32:64851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotdt.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotdt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aijG0l-HsFEEzscxZZCJKQAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 15:42:01
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 11:41:57.195937 2026] [security2:error] [pid 20229:tid 20229] [client 155.212.39.32:26111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||joeordie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "joeordie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiWRRZygzpvyqjytMx3D2QAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-24 20:06:16
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
kosada.com
2026-05-13 04:55:33
(1 month ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-04-03 07:12:19
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 03 03:12:11.795704 2026] [security2:error] [pid 7135:tid 7135] [client 155.212.39.32:24139] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jrpiano.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jrpiano.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ac9oSxFY22tQje4nRWBc8QAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-03-30 16:15:33
(3 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-03-29 12:22:29
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 08:22:20.070553 2026] [security2:error] [pid 26996:tid 26996] [client 155.212.39.32:28453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newerc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newerc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ackZfAtVh1mcHINx--CyYwAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 11:41:41
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.39.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 06:41:35.747175 2026] [security2:error] [pid 29438:tid 29438] [client 155.212.39.32:36949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||heatherweathers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heatherweathers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIM7w4KuMYkhbwObRnRjgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2025-11-04 05:13:56
(7 months ago)
WordPress login attempt
Brute-Force