This IP address has been reported a total of
7
times from
4 distinct
sources.
178.20.214.12 was first reported on
March 7th 2025 , and the most recent report was
1 week ago .
In the last 60 days, the only reporter location was:
Italy
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago . It is possible that this IP is no
longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฎ๐น
Catapult
2026-10-07 09:21:00
(1 week ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 19:37:24
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 15:37:17.730255 2026] [security2:error] [pid 2509258:tid 2509258] [client 178.20.214.12:21751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||simia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "simia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amUQbZZUUIYLX1RHckJ97AAAAB8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-01-05 22:23:13
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 17:23:09.990359 2026] [security2:error] [pid 1546992:tid 1546992] [client 178.20.214.12:62327] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||engineeringarts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVw5zS00hTfhA6Y5ol0tkgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-01-05 15:54:34
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 10:54:27.810703 2026] [security2:error] [pid 29547:tid 29547] [client 178.20.214.12:47463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||honigcpa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "honigcpa.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVves8rUGhYEvjwlFj7u6QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-01-04 17:14:47
(9 months ago)
wordpress-trap
Web App Attack
๐จ๐ญ
backslash
2026-01-03 04:20:11
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-03-07 04:54:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 178.20.214.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 23:54:35.683397 2025] [security2:error] [pid 11779:tid 11779] [client 178.20.214.12:16021] [client 178.20.214.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbowerslaw.com"] [uri "/.env"] [unique_id "Z8p8C7UaxkaQ3VLnk9dWJgAAAAc"], referer: https://tasamm.com/about/ggg186.html
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports