Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:225170) triggered by 181.20.11.109 (181-20-11-109.mrse.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:48:13.500750 2026] [security2:error] [pid 13693:tid 13693] [clien ...
show more(mod_security) mod_security (id:225170) triggered by 181.20.11.109 (181-20-11-109.mrse.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:48:13.500750 2026] [security2:error] [pid 13693:tid 13693] [client 181.20.11.109:38676] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kaldaragroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kaldaragroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avPJXfcF4hO8KnP27h4axgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Large-scale coordinated botnet (450+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index ...
show moreLarge-scale coordinated botnet (450+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) | Attack Signature Blocked: /wishlist/index/add/product/11098/form_key/rfa82X8J8R0wTdh9/ | UA: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.2; Trident/4.1) | (Magento Site)
show less
Hacking
Bad Web Bot
Web App Attack
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
